Edit tour

Windows Analysis Report
https://alluc.co/watch-movies/passengers.html

Overview

General Information

Sample URL:	https://alluc.co/watch-movies/passengers.html
Analysis ID:	1576678
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Javascript uses Websockets

Sigma detected: DNS Query Tor .Onion Address - Sysmon

Uses TOR for connection hidding

Connects to several IPs in different countries

HTML page contains hidden javascript code

HTML page contains string obfuscation

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1856,i,4275831533134915997,9852716672962275646,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alluc.co/watch-movies/passengers.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

System Summary

Sigma detected: DNS Query Tor .Onion Address - Sysmon

Source: DNS query

Author: frack113: Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T11:52:26.716774+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50093	34.111.113.62	443	TCP
2024-12-17T11:52:37.315534+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50145	37.252.171.53	443	TCP
2024-12-17T11:52:55.035696+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50198	67.202.105.23	443	TCP
2024-12-17T11:52:57.395893+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	50210	52.87.7.90	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.8.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://alluc.co/watch-movies/passengers.html... The script uses the `document.write()` function to dynamically insert an iframe element with a suspicious source URL. This behavior is considered high-risk as it can potentially lead to the execution of remote or untrusted code, which could be used for malicious purposes such as phishing or drive-by downloads. The use of Base64 encoding to obfuscate the iframe source URL further increases the risk score.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://alluc.co/watch-movies/passengers.html... The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, obfuscated code, and redirects to suspicious domains. While some contextual factors, such as the script's apparent purpose of loading a movie streaming page, may suggest legitimate use, the overall aggressive and opaque nature of the code raises significant security concerns. Further investigation is warranted to determine the true intent and potential impact of this script.

HTML page contains obfuscated javascript

Source: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3	HTTP Parser: //var _0x3340cc=_0x3d49;(function(_0x53d08c,_0x1feda5){var _0x2e1cb0=_0x3d49,_0x1f4883=_0x53d08c();
Source: https://aqfer.lijit.com/samples/empty.js	HTTP Parser: (function(){})()

Javascript uses Websockets

Source: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3

HTTP Parser: var loadedmeta = !1,srt_loaded=false,vast_available=false,wasplay=false,ads_was_r = true;console.log('current document readystate:', document.readystate);document.onreadystatechange = function() { console.log('onreadystatechange readystate:', document.readystate)};window.addeventlistener('domcontentloaded', function() {console.log('domcontentloaded readystate:', document.readystate)});window.addeventlistener('load', function() { console.log('load readystate:', document.readystate);});document.onreadystatechange = function() { console.log('onreadystatechange readystate:', document.readystate)};var m = 1;function checkiosversion () { var agent = window.navigator.useragent, start = agent.indexof( 'os ' ); if( ( agent.indexof( 'iphone' ) > -1 || agent.indexof( 'ipad' ) > -1 ) && start > -1 ){ return window.number( agent.substr( start + 3, 3 ).replace( '_', '.' ) ); } return 12;}function checkw(){ console.log("document.body.scrollheight: "+document.body.scrollheig...

Source: https://alluc.co/watch-movies/passengers.html?__cf_chl_rt_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://hqq.to/js/script_33.11.js?16	HTTP Parser: Found new string: script window.mobileAndTabletCheck = function() {. var check = false;. (function(a) {. if (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino\|android\|ipad\|playbook\|silk/i.test(a) \|\| /1207\|6310\|6590\|3gso\|4thp\|50[1-6]i\|770s\|802s\|a wa\|abac\|ac(er\|oo\|s\-)\|ai(ko\|rn)\|al(av\|ca\|co)\|amoi\|an(ex\|ny\|yw)\|aptu\|ar(ch\|go)\|as(te\|us)\|attw\|au(di\|\-m\|r \|s )\|avan\|be(ck\|ll\|nq)\|bi(lb\|rd)\|bl(ac\|az)\|br(e\|v)w\|bumb\|bw\-(n\|u)\|c55\/\|capi\|ccwa\|cdm\-\|cell\|chtm\|cldc\|cmd\-\|co(mp\|nd)\|craw\|da(it\|ll\|ng)\|dbte\|dc\-s\|devi\|dica\|dmob\|do(c\|p)o\|ds(12\|\-d)\|el(49\|ai)\|em(l2\|ul)\|er(ic\|k0)\|esl8\|ez([4-7]0\|os\|wa\|ze)\|fetc\|fly(\-\|_)\|g1 u\|g560\|gene\|gf\-5\|g\-mo\|go(\.w\|od)\|gr(ad\|un)\|haie\|hcit\|hd\-(m\|p\|t)\|hei\-\|hi(pt\|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(20\|go\|ma)\|i230\|iac( \|\-\|\...
Source: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3	HTTP Parser: Found new string: script .setTimeout(function() {. atOptions = {. 'key' : '10b4cff8dbfeeee035c8639f52712c5c',. 'format' : 'js',. 'params' : {}. };.if(/\bCrOS\b/.test(navigator.userAgent) \|\| navigator.userAgent.toLowerCase().indexOf("pixel")>=0){. .}else{. if(!device.tv() && !device.ps() && !device.xbox() && supportES6() && typeof $.cookie('userid') == 'undefined' && top != self && is_g !== true){. //var scrr=getIframeSize();. //console.log('width: '+scrr['width']+', height: '+ scrr['height'] );. //if(scrr['width'] > 400 & scrr['height'] > 100){. . var sNew = document.createElement("script");. sNew.async = true;. sNew.defer = true;. sNew.setAttribute('data-subid1',"%subid1%");. var randsnew = Math.floor(1 + Math.random() * (100));. //sNew.src = "//s20dh7e9dh.com/10b4cff8dbfeeee035c8639f52712c5c/invoke.js"; . //sNew.src = "//dumbpop.com/pn21ywqw/z/sc/scssx/1601554/lib.js"; . sNew.setAttribute('data-spot', '277745'); . sNew.setAttribute('data-admpid', '12669'); . //sNew.src...

Source: https://alluc.co/watch-movies/passengers.html?__cf_chl_rt_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon
Source: https://alluc.co/watch-movies/passengers.html	HTTP Parser: No favicon

Networking

Uses TOR for connection hidding

Source: unknown	DNS query: name: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
Source: unknown	DNS query: name: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
Source: unknown	DNS query: name: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
Source: unknown	DNS query: name: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion

Source: unknown

Network traffic detected: IP country count 12

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50093 -> 34.111.113.62:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50145 -> 37.252.171.53:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50210 -> 52.87.7.90:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:50198 -> 67.202.105.23:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /watch-movies/passengers.html HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch-movies/passengers.html HTTP/1.1Host: alluc.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8f365b3ddae142a1 HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.html?__cf_chl_rt_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js?onload=fjGVd3&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://alluc.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8f365b3ddae142a1 HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js?onload=fjGVd3&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f365b70ac0041af&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f365b70ac0041af&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8f365b70ac0041af/1734432682624/c6bba5d7ab5d02a2179f1ee2daa5f799583ae325c0767023a7b7f6a7cbe65851/mbyYJbCYGAkTQGK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f365b70ac0041af/1734432682625/MGqtdmfqwZAmaAR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f365b70ac0041af/1734432682625/MGqtdmfqwZAmaAR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.html?__cf_chl_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/reset.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/styles_v80.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/app_v9.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/main.css?v=4.0 HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/jquery.cluetip.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/jquery.qtip.min.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/custom.css?v=1.1 HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/slide.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /css/psbar.css HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/base64.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/load.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/tooltips.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.11.1.min.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/wow.min.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/jquery.bxslider.min.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/base64.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lazyload.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/load.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/slider_v04.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/tooltips.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/movies.min.js?v=1.6 HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/wow.min.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/app_v31.js HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.11.1.min.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bg.jpg HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/css/main.css?v=4.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/jquery.bxslider.min.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1231337707-poster-Tache.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12330989112-poster-Sinister-Surgeon.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12321158916-poster-Wineville.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lazyload.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/slider_v04.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /92/7e/05/927e05d1dfb77a114f82a8dfe3ac3790.js HTTP/1.1Host: repetitiousfontmonopoly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watching/passengers__ZJXEAGel2Y__movie/ HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/movies.min.js?v=1.6 HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-light.png HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/css/main.css?v=4.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /js/app_v31.js HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/YouMayAlsoLike.png HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /images/bg.jpg HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12328215740-poster-The-Undeserving.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12327191509-poster-Martingale.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12328652996-poster-Carnage-for-Christmas.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12315497092-poster-Don-Q.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12311450972-poster-Tokyo-Shaking.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1239411900-poster-Back-Home.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1231337707-poster-Tache.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12330989112-poster-Sinister-Surgeon.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12321158916-poster-Wineville.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-light.png HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-footer.png HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movie/passengers HTTP/1.1Host: gomo.toConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12320562862-poster-Bigfoot-vs-Krampus.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1231355644-poster-Passengers.jpg HTTP/1.1Host: 123images.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/YouMayAlsoLike.png HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12328215740-poster-The-Undeserving.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12327191509-poster-Martingale.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mask-title.png HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/css/main.css?v=4.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /movies/12315497092-poster-Don-Q.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12328652996-poster-Carnage-for-Christmas.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/btn-overlay.png HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/css/main.css?v=4.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /movies/12311450972-poster-Tokyo-Shaking.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0d/78/b9/0d78b9388f817250ac191adb4fce32e8.js HTTP/1.1Host: repetitiousfontmonopoly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9a/61/7e/9a617ed9fe89da712ab169729ec98191.js HTTP/1.1Host: repetitiousfontmonopoly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1239411900-poster-Back-Home.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dsPlayer/player.css HTTP/1.1Host: gomo.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gomo.to/movie/passengersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://alluc.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://alluc.co/css/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
Source: global traffic	HTTP traffic detected: GET /images/logo-footer.png HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mask-title.png HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4329645=1734432721689; HstCla4329645=1734432721689; HstCmu4329645=1734432721689; HstPn4329645=1; HstPt4329645=1; HstCnv4329645=1; HstCns4329645=1
Source: global traffic	HTTP traffic detected: GET /movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/12320562862-poster-Bigfoot-vs-Krampus.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /loading.gif HTTP/1.1Host: gomo.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/movie/passengersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dsPlayer/dropzone.js HTTP/1.1Host: gomo.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/movie/passengersAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /movies/1231355644-poster-Passengers.jpg HTTP/1.1Host: 123images.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/btn-overlay.png HTTP/1.1Host: alluc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: HstCfa4329645=1734432721689; HstCla4329645=1734432721689; HstCmu4329645=1734432721689; HstPn4329645=1; HstPt4329645=1; HstCnv4329645=1; HstCns4329645=1
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /idg/?su=51A0173443272670518C9622FCF8D1A8 HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /loading.gif HTTP/1.1Host: gomo.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dsPlayer/dropzone.js HTTP/1.1Host: gomo.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dtsa.js HTTP/1.1Host: p.dtsan.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4329689&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mPassengers%20-%20PutStream&@n0&@ohttps%3A%2F%2Falluc.co%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:192497717&@b3:1734432728&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=51A0173443272670518C9622FCF8D1A8 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1734432728201&dn=AFWU&iso=0&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&t=Watch%20Passengers%20Online%20Free&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.282460356599068&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /decoding_v3.php HTTP/1.1Host: gomo.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&j=https%3A%2F%2Falluc.co%2F HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4329689&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mPassengers%20-%20PutStream&@n0&@ohttps%3A%2F%2Falluc.co%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:192497717&@b3:1734432728&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?zdid=1332&zcluid=537102118bb9c575 HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1734432728201&dn=AFWU&iso=0&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&t=Watch%20Passengers%20Online%20Free&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=CoIKSGdhV9uxfyz0BEhkAg==
Source: global traffic	HTTP traffic detected: GET /dtsa.js HTTP/1.1Host: p.dtsan.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=k3eNWWdhV9sHOLzCRlkrhQ==; pids=%5B%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A4%2C%22ts%22%3A1734432731180%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1734432731180%7D%5D
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.282460356599068&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /styles/global/embed_player.3.css?130 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432731180.2&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432731180.4&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/websocket_ip.min.js HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/d_check.js?35 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/embed.232.js?736 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&j=https%3A%2F%2Falluc.co%2F HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/top/popunder.js HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=gomo.to&_ss=670z4oxb1e&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=gmr4&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /dtsa.js HTTP/1.1Host: p.dtsan.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&r=https%3A%2F%2Falluc.co%2F HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=51A0173443272670518C9622FCF8D1A8 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/d_check.js?35 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/websocket_ip.min.js HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&r=https%3A%2F%2Falluc.co%2F HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=gomo.to&_ss=670z4oxb1e&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=gmr4&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432731180.2&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=C35A28192E3B45F8BB287CD9F1B266EA
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432731180.4&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=52A6A8AD3BE049C09124955C0D12A559
Source: global traffic	HTTP traffic detected: GET /ad/top/popunder.js HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/adv/fuckadblock.js?2 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/embed.232.js?736 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2F&event_source=dtscout&rnd=0.04960668425926551&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/js.load.1.js?3247679708608293 HTTP/1.1Host: commentsmodule.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hqq.toSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm=&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /386076.gif?partner_uid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2F&event_source=dtscout&rnd=0.04960668425926551&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/adv/fuckadblock.js?2 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /styles/player/video-js.min.css?147 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /styles/player/embed.3.css?65 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=541d4872-cb6a-45bf-9ea4-22423816baf1; TDCPM=CAEYBSgCMgsI1rWspvOkzz0QBTgB
Source: global traffic	HTTP traffic detected: GET /styles/cbv2new/theme/embed_menu.css?21 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videojs-mobile-ui@0.4.1/dist/videojs-mobile-ui.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videojs-vast-vpaid@2.0.2/bin/videojs.vast.vpaid.min.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEDqOsxIRfrLl-4FWjx9P3oI&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=b05b22a9-d722-433a-6b24-a0aff3d6777f; zsc=%113%9BN%A6%032%01%8E%C2%04%FA%BE%7C%AC%09%F4%E3bQ%9A%2F%8C%7Cg%AEC%1E%E6%C2%D0%C8%C8%3Fso%D6%93%05W%D7%7F%E0%C9%D3H%86K+i%E7%128%B8uP%0Da%CCQ%AB%00%3A%C6%91kC%DD%90%8An%ACg%CE%3D%F0%C8%8Bz%5D%88%82h
Source: global traffic	HTTP traffic detected: GET /styles/player/videojs.logobrand.css HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/share/videojs-social.css HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.css HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CJzIFxIjCh8IARCAVxoYWkdzQUFHZGhWOWtBQUFBSVBVZllBdz09EAAaDQjir4W7BhIFCOgHEABCAEoA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=t2krXCjpcEaGBuBriU0MPDeg86es75Bo7o1CPFwuVWY=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=7ad990fb-c8ac-439b-aaa0-c9166989fa1e; TDCPM=CAEYBSgCMgsI2J6WtfOkzz0QBTgB
Source: global traffic	HTTP traffic detected: GET /js/js.load.1.js?3247679708608293 HTTP/1.1Host: commentsmodule.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3649183083493064749 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=t2krXCjpcEaGBuBriU0MPDeg86es75Bo7o1CPFwuVWY=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=541d4872-cb6a-45bf-9ea4-22423816baf1&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1; done_redirects147=1
Source: global traffic	HTTP traffic detected: GET /js/video.js/pip/pip.css?23 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /styles/player/cast.css?1 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /styles/player/videojs-aspect-ratio-panel.css?4 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEDqOsxIRfrLl-4FWjx9P3oI&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=b05b22a9-d722-433a-6b24-a0aff3d6777f; zsc=%113%9BN%A6%032%01%8E%C2%04%FA%BE%7C%AC%09%F4%E3bQ%9A%2F%8C%7Cg%AEC%1E%E6%C2%D0%C8%C8%3Fso%D6%93%05W%D7%7F%E0%C9%D3H%86K+i%E7%128%B8uP%0Da%CCQ%AB%00%3A%C6%91kC%DD%90%8An%ACg%CE%3D%F0%C8%8Bz%5D%88%82h
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/trace HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=650769d44d2769074c8410e9f916366c1b1cbadc0a96fd995b857c6f13f7cc6cf4cb09cee1a4f8eb&person_id=3649183083493064749&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3649183083493064749
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=57225f1ad1f455fbac8bdb0652440409f725acfdeb95b888d8da43552edec749791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/script_33.11.js?16 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /ttd?uid=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@webtor/p2p-media-loader-core@0.6.2/build/p2p-media-loader-core.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2418uVLiea7JtkNGiYlcOpgBZTZ0rwWAyxUI2hSKvgVA&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=650769d44d2769074c8410e9f916366c1b1cbadc0a96fd995b857c6f13f7cc6cf4cb09cee1a4f8eb&person_id=3649183083493064749&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3649183083493064749
Source: global traffic	HTTP traffic detected: GET /js/script_33.11.js?16 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /player/get_player_image.php HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js HTTP/1.1Host: profitableexactly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttd?uid=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2418uVLiea7JtkNGiYlcOpgBZTZ0rwWAyxUI2hSKvgVA&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1734432742152 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1734432742169 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@webtor/p2p-media-loader-core@0.6.2/build/p2p-media-loader-core.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@webtor/p2p-media-loader-hlsjs@0.6.2/build/p2p-media-loader-hlsjs.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/e98DOcW/events?id.sovrnid.value=na&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1512&partner_device_id=na&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1734432742169&_li_chk=true&previous_uuid=24c8089979764235983642616b6b4dec HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=24c80899-7976-4235-9836-42616b6b4dec
Source: global traffic	HTTP traffic detected: GET /ups/58679/cms?partner_id=DELI&gdpr=0&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBOlXYWcCEK96eExuP1RHawFPA8eq5mkFEgEBAQGpYmdrZ9xH0iMA_eMAAA&S=AQAAAkF5sk1trEuz8MBi4b23c5g
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=fe2ac9ca-b945-43f1-8098-0ca8b20378a0&vxii_rmax=2 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NDUzMzIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@webtor/p2p-media-loader-hlsjs@0.6.2/build/p2p-media-loader-hlsjs.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/peer5.videojs5.plugin.2.js?150 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1lb8nqqaarq2l&us_privacy=$(US_PRIVACY) HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=1512&partner_device_id=na&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/e98DOcW/events?id.sovrnid.value=na&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d
Source: global traffic	HTTP traffic detected: GET /5/ct=y/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7006&vxii_pdid=24c80899-7976-4235-9836-42616b6b4dec&us_privacy=1YN- HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NDUzMzIsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /?partner=252&mapped=y-sMELdvJE2pROn8_A0YCS0i2D_rw1Mn19Nw--~A&gdpr=0 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1; done_redirects147=1; done_redirects252=1
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=THROTLE HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBOlXYWcCEK96eExuP1RHawFPA8eq5mkFEgEBAQGpYmdrZ9xH0iMA_eMAAA&S=AQAAAkF5sk1trEuz8MBi4b23c5g
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /video.js@7.21.1/dist/video.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1lb8nqqaarq2l&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp
Source: global traffic	HTTP traffic detected: GET /js/peer5.videojs5.plugin.2.js?150 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=7ad990fb-c8ac-439b-aaa0-c9166989fa1e; TDCPM=CAEYBSABKAIyCwjYnpa186TPPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=2b28f164-9d27-74f1-30ab-0842cf448d7d&iiqpciddate=1734432747191&tsrnd=744_1734432747203&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=0 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=19a72782b558262c5c95264fea115e8f HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1; done_redirects147=1; done_redirects252=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=THROTLE HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBOlXYWcCEK96eExuP1RHawFPA8eq5mkFEgEBAQGpYmdrZ9xH0iMA_eMAAA&S=AQAAAkF5sk1trEuz8MBi4b23c5g; IDSYNC=199z~2mfm
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBOlXYWcCEK96eExuP1RHawFPA8eq5mkFEgEBAQGpYmdrZ9xH0iMA_eMAAA&S=AQAAAkF5sk1trEuz8MBi4b23c5g; IDSYNC=199z~2mfm
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1lb8nqqaarq2l&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp; _ljtrtb_5=1lb8nqqaarq2l
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=2b28f164-9d27-74f1-30ab-0842cf448d7d&iiqpciddate=1734432747191&tsrnd=744_1734432747203&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=&ckls=true&ci=5N3Yr93DKn&nc=false&trid=994340663 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=5N3Yr93DKn
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=19a72782b558262c5c95264fea115e8f HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp; _ljtrtb_5=1lb8nqqaarq2l; _ljtrtb_5001=19a72782b558262c5c95264fea115e8f
Source: global traffic	HTTP traffic detected: GET /video.js@7.21.1/dist/video.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-3zke5A1E2oT0PR183UNgLTs55LLHss.ywNxnKA--~A HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NDg1NjQsInQiOjJ9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTAyMjdiMjBjLWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjozLCJ0cyI6MSwicHMiOjEsInNwIjo1MDM4LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc0ODU2NX0=
Source: global traffic	HTTP traffic detected: GET /@silvermine/videojs-chromecast@1.3.2/dist/silvermine-videojs-chromecast.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=68680681fa4ed80c HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBOlXYWcCEK96eExuP1RHawFPA8eq5mkFEgEBAQGpYmdrZ9xH0iMA_eMAAA&S=AQAAAkF5sk1trEuz8MBi4b23c5g; IDSYNC=199z~2mfm
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1512&partner_device_id=J2KMAQZHBi96bc9jRXet1Ayp&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=2b28f164-9d27-74f1-30ab-0842cf448d7d&iiqpciddate=1734432747191&tsrnd=744_1734432747203&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&dw=1280&dh=1024&dpr=1&lan=en-US&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&gdpr=&ckls=true&ci=5N3Yr93DKn&nc=false&trid=994340663 HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=5N3Yr93DKn; intentIQCDate=1734432752670; IQPData=137264061#1734432752668#0#1734432752668; CSDT=UEQ6MTEzMDRfMCZVWEQ1NGJI; IQadv=1734432752671; IQMID=137264061#1734432752671; ASDT=0
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-3zke5A1E2oT0PR183UNgLTs55LLHss.ywNxnKA--~A HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NTMwNDEsInQiOjN9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTAyMjdiMjBjLWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjozLCJ0cyI6MiwicHMiOjIsInNwIjo1MDQzLCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc1MzA0MX0=
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncThrotle? HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@silvermine/videojs-chromecast@1.3.2/dist/silvermine-videojs-chromecast.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D43e7a474-a419-4060-8143-88849fca883d%252C%252C HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=Q1o2RCbC1TnvbR5
Source: global traffic	HTTP traffic detected: GET /videojs-vast-vpaid@2.0.2/bin/videojs_5.vast.vpaid.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10835/tp=ALCT/tpid=/gdpr=0/gdpr_consent=?https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5003%26vxii_pdid%3D%24%7Bprofile_id%7D%26vxii_ts%3D4%26_t%3D1734432755 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=2; _cc_id=19a72782b558262c5c95264fea115e8f; _cc_cc="ACZ4nGNQMLRMNDcytzBKMjW1MDIzSjZNtjQ1MjNJS000NDRNtUhjAIL0xPA3DHDAe%2B%2BDJeMeLYb%2FjIwMPzZOYYGxl%2F8phDHPHT3EDGPv3ndZAMY%2BvHgOXHn7uqfcMHbDf00Y88njm4Yw9r0uLRjz0qlHbDD2uyUIU97MPMAEYwMAwG8%2Fgg%3D%3D"; _cc_aud="ABR4nGNgYGBITwx%2FwwADLAwMXDNADEat2RBqFojic3cAkgB76wTS"
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fpixel.tapad.com%252Fidsync%252Fex%252Freceive%253Fpartner_id%253DAPPNEXUS%2526partner_device_id%253D%2524UID%2526pt%253D43e7a474-a419-4060-8143-88849fca883d%25252C%25252C HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=Hr8nSjnHMrbXb88Zr552ZYCaQqsOtRdKMVVszxI05xo-oJo3N3-8rzyMqAy9Gc358IM9SYj2evbnZULe441NwBRCd5045lNpVzcVG4seF5k.; receive-cookie-deprecation=1; uuid2=3437243107694521964
Source: global traffic	HTTP traffic detected: GET /match?bid=9sn4omv&uid=Q1o2RCbC1TnvbR5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5003&vxii_pdid=19a72782b558262c5c95264fea115e8f&vxii_ts=4&_t=1734432755 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NTUwMzQsInQiOjR9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTAyMjdiMjBjLWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjozLCJ0cyI6MywicHMiOjMsInNwIjo1MDAzLCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc1NTAzNX0=
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs-hlsjs-plugin.1.3.5.js HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3437243107694521964&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30064&dpuuid=193d43f4ed7-2e810000010f5c6e&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5003&vxii_pdid=19a72782b558262c5c95264fea115e8f&vxii_ts=4&_t=1734432755 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NTk5ODUsInQiOjV9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTA4ZjY2MTQ3LWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjozLCJwcyI6Mywic3AiOjUwMDMsInBwIjozLCJ0c2UiOjMsImx0c2UiOjE3MzQ0MzI3NTUwMzV9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3437243107694521964&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458-2!8458
Source: global traffic	HTTP traffic detected: GET /hls.js@1.3.5/dist/hls.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30064&dpuuid=193d43f4ed7-2e810000010f5c6e&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=23541675871998615043844100288184115988
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs-hlsjs-plugin.1.3.5.js HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /sync?nid=throtle HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=23541675871998615043844100288184115988&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /hls.js@1.3.5/dist/hls.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /detect-file-encoding-and-language@2.3.1/umd/language-encoding.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5044&vxii_pdid=lrhR-Xu2Vn5xeulD3h3wrAgue70&_t=1734432764 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NjIyNjQsInQiOjZ9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTA4ZjY2MTQ3LWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjoyLCJ0cyI6MSwicHMiOjQsInNwIjo1MDQ0LCJwcCI6NCwidHNlIjo0LCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc2MjI2NH0=
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2AU4W3SMqLQhVjJvq6yUFUhecYRjUFS0G1YFru4wUh1M&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3649183083493064749
Source: global traffic	HTTP traffic detected: GET /detect-file-encoding-and-language@2.3.1/umd/language-encoding.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/asssrt2vtt.18.js?43 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /match?bid=r8hrb20&uid=nil&dc_rc=3&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /stats/e.php?4329645&@Ab&@R58661&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thrtl?url=https%3A%2F%2Fnlsn.thrtle.com%2Fsync%3Fvxii_pid%3D5036%26vxii_ts%3D7 HTTP/1.1Host: thrtl.redinuid.imrworldwide.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs.hotkeys.min.js HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/asssrt2vtt.18.js?43 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: e.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /stats/e.php?4329645&@Ab&@R58661&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202273308&_puid=2x19hhHue5vGNNPef0uQt8rHEfLNG8BngAPLDvazLGds&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90%26uid%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5036&vxii_ts=7&puid=0e9ffee0-bc65-11ef-b5aa-dd7f3d432835 HTTP/1.1Host: nlsn.thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NjYxMzAsInQiOjd9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTA4ZjY2MTQ3LWJjNjUtMTFlZi05NDAzLTAyNDIwYWZmMGIwYiIsIm1zIjoyLCJ0cyI6MiwicHMiOjUsInNwIjo1MDM2LCJwcCI6NSwidHNlIjo1LCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc2NjEzMX0=
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs.hotkeys.min.js HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/share/videojs-social.2.min.js?137 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=2&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=k3eNWWdhV9sHOLzCRlkrhQ==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A4%2C%22ts%22%3A1734432731180%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1734432731180%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=51A0173443272670518C9622FCF8D1A8 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1; done_redirects147=1; done_redirects252=1; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=&ip=8.46.123.189&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D232093305099003581238 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A%2Ft75neTcb8QHDkGvKwp6P9z0CWX0QAUs
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/share/videojs-social.2.min.js?137 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.js?11 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=2&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=k3eNWWdhV9sHOLzCRlkrhQ==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A5%2C%22ts%22%3A1734432773011%7D%2C%7B%22p%22%3A%22b07d22f14e%22%2C%22f%22%3A1%2C%22ts%22%3A1734432773011%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A2%2C%22ts%22%3A1734432773011%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22cb5617b0e3%22%2C%22f%22%3A1%2C%22ts%22%3A1734432773011%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1734432773011%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A3%2C%22ts%22%3A1734432773011%7D%5D
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432773011.1&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=52A6A8AD3BE049C09124955C0D12A559
Source: global traffic	HTTP traffic detected: GET /ps/?ts=1734432773011.2&ri=4&ru=https%3A%2F%2Fpartner.mediawallahscript.com%2F%3Faccount_id%3D1029%26partner_id%3D936a40b7%26uid%3D33XUSERID33X%26custom%3D%26tag_format%3Dimg%26tag_action%3Dsync HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=537102118bb9c575; done_redirects219=1; done_redirects147=1; done_redirects252=1; done_redirects236=1; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=k3eNWWdhV9sHOLzCRlkrhQ%3D%3D&pcat=Entertainment%2FCelebrities&pdev=&pctry=US&referrer=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&us_privacy=&cache_buster=1734432773011.4 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.0722588624980185&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=Entertainment%2FCelebrities&us_privacy=&random=1734432773011.3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1734432773011.6 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A%2Ft75neTcb8QHDkGvKwp6P9z0CWX0QAUs
Source: global traffic	HTTP traffic detected: GET /qrcodejs@1.0.0/qrcode.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=232093305099003581238 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.js?11 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1734432773011.1&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1Host: i.simpli.fiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=52A6A8AD3BE049C09124955C0D12A559
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.0722588624980185&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /?account_id=1029&partner_id=936a40b7&uid=212922084710172&custom=&tag_format=img&tag_action=sync HTTP/1.1Host: partner.mediawallahscript.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qrcodejs@1.0.0/qrcode.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=232093305099003581238 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /js/video.js/pip/pip.js?115 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1734432773011.6 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A%2Ft75neTcb8QHDkGvKwp6P9z0CWX0QAUs; u=C\|0AAAAAAAALvQUhgAAAAAA
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=1992631740161623789&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D8ddcff7c-cab1-4857-898b-252123550b27%253A1734432775.2811596%26pid%3D500040%26it%3D1%26iv%3D8ddcff7c-cab1-4857-898b-252123550b27%253A1734432775.2811596%26_%3D1734432775.283112 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=8ddcff7c-cab1-4857-898b-252123550b27:1734432775.2811596; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiOGRkY2ZmN2MtY2FiMS00ODU3LTg5OGItMjUyMTIzNTUwYjI3OjE3MzQ0MzI3NzUuMjgxMTU5NiJ9.Z2FYBw.zm7vWvDdL6iZpqq3aL4scgqg6y8
Source: global traffic	HTTP traffic detected: GET /videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.js/pip/pip.js?115 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /match?bid=7ri0rgu&uid=C3C9ACED-CFCA-4787-B7C7-77CCE2BCAA3F HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=8ddcff7c-cab1-4857-898b-252123550b27%3A1734432775.2811596&pid=500040&it=1&iv=8ddcff7c-cab1-4857-898b-252123550b27%3A1734432775.2811596&_=1734432775.283112 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARDOGQ; lidid=24c80899-7976-4235-9836-42616b6b4dec
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1512&partner_device_id=J2KMAQZHBi96bc9jRXet1Ayp&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458-2!8458
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=J2KMAQZHBi96bc9jRXet1Ayp HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=J2KMAQZHBi96bc9jRXet1Ayp&rnd=1734432780514 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgj1ARDOGQ; lidid=24c80899-7976-4235-9836-42616b6b4dec
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=J2KMAQZHBi96bc9jRXet1Ayp HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3NzE4MDEsInQiOjh9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTEwMDE1MDgyLWJjNjUtMTFlZi1hMGFkLTAyNDIwYWZmMGI5OSIsIm1zIjoyLCJwcyI6NSwic3AiOjUwMzYsInBwIjo1LCJ0c2UiOjUsImx0c2UiOjE3MzQ0MzI3NjYxMzF9
Source: global traffic	HTTP traffic detected: GET /match?bid=7ri0rgu&uid=C3C9ACED-CFCA-4787-B7C7-77CCE2BCAA3F HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=193d43f4ed7-2e810000010f5c6e; SERVERID=23662~DM
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1734432780498 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=5N3Yr93DKn; intentIQCDate=1734432752670; IQadv=1734432752671; IQMID=137264061#1734432752671; ASDT=0; IQPData=137264061#1734432755020#0#1734432752668; CSDT=UEQ6MTEzMDRfMCZVWEQ1NURE
Source: global traffic	HTTP traffic detected: GET /@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/hls.tune.144.js?98 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1734432780498 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=52A6A8AD3BE049C09124955C0D12A559
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1734432775.283112&iv=8ddcff7c-cab1-4857-898b-252123550b27:1734432775.2811596 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=k_mgWMoPpNIPQe4k; didts=1734432742; nnls=; pxrc=COavhbsGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=J2KMAQZHBi96bc9jRXet1Ayp HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=540&dpuuid=43e7a474-a419-4060-8143-88849fca883d&redir=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DADB%26partner_device_id%3D%24%7BDD_UUID%7D%26pt%3D43e7a474-a419-4060-8143-88849fca883d%252C%252C HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=23541675871998615043844100288184115988; dpm=23541675871998615043844100288184115988
Source: global traffic	HTTP traffic detected: GET /sync?ssp=liveintent&user_id=24c80899-7976-4235-9836-42616b6b4dec HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=52A6A8AD3BE049C09124955C0D12A559 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp; _ljtrtb_5=1lb8nqqaarq2l; _ljtrtb_5001=19a72782b558262c5c95264fea115e8f; ljtrtb=eJyrVjI1MDBUslIytEw0NzK3MEoyNbUwMjNKNk22NDUyM0lLTTQ0NE21SFPSUTIFKctJssgrLExMLCo0ylGqBQDnnhCs
Source: global traffic	HTTP traffic detected: GET /videojs-mobile-ui@0.4.1/dist/videojs-mobile-ui.min.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1734432775.283112&iv=8ddcff7c-cab1-4857-898b-252123550b27:1734432775.2811596 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=k_mgWMoPpNIPQe4k; didts=1734432742; nnls=; pxrc=COavhbsGEgYIgr0rEAA=
Source: global traffic	HTTP traffic detected: GET /js/hls.tune.144.js?98 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=ADB&partner_device_id=23541675871998615043844100288184115988&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458-2!8458
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5017&vxii_pdid=CF9B683AFE32CE41DB598BB85412CF54 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImZlMmFjOWNhLWI5NDUtNDNmMS04MDk4LTBjYThiMjAzNzhhMCIsImwiOjE3MzQ0MzI3ODMwNDIsInQiOjl9; sc=eyJpIjoiYjAwNjY4Y2EtMzY4Yy00Yzg1LTkzZWQtNDE2MjEzYzZkYWU0Iiwic2lkIjoic2lkLTEwMDE1MDgyLWJjNjUtMTFlZi1hMGFkLTAyNDIwYWZmMGI5OSIsIm1zIjoyLCJ0cyI6MSwicHMiOjYsInNwIjo1MDE3LCJwcCI6NiwidHNlIjo2LCJpciI6dHJ1ZSwibHRzZSI6MTczNDQzMjc4MzA0M30=
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=liveintent&user_id=24c80899-7976-4235-9836-42616b6b4dec HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3cb309c3-fed4-435b-8990-a0deaa86e372; c=1734432785; tuuid_lu=1734432785
Source: global traffic	HTTP traffic detected: GET /videojs-mobile-ui@0.4.1/dist/videojs-mobile-ui.min.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs-aspect-ratio-panel.js?4 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=52A6A8AD3BE049C09124955C0D12A559 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=J2KMAQZHBi96bc9jRXet1Ayp; _ljtrtb_5=1lb8nqqaarq2l; _ljtrtb_5001=19a72782b558262c5c95264fea115e8f; ljtrtb=eJyrVjI1MDBUslIytEw0NzK3MEoyNbUwMjNKNk22NDUyM0lLTTQ0NE21SFPSUTIFKctJssgrLExMLCo0ylGqBQDnnhCs; _ljtrtb_2=52A6A8AD3BE049C09124955C0D12A559
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=ADB&partner_device_id=23541675871998615043844100288184115988&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1734432746553; TapAd_DID=43e7a474-a419-4060-8143-88849fca883d; TapAd_3WAY_SYNCS=1!8458-2!8458-3!8458
Source: global traffic	HTTP traffic detected: GET /dcm?pid=fdd0fe1d-1300-4eb1-b034-77552483084f&id= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60542517 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.js/7/videojs-aspect-ratio-panel.js?4 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=11040624 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.counters.2.js?117 HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://gomo.toSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gomo.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=fdd0fe1d-1300-4eb1-b034-77552483084f&id=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxPfVU6jL0VqhlFAk64RrD4\|t
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://alluc.coSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://alluc.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flv/api/files/thumbs/2019/05/03/1556851369me0pr-640x480-1.jpg HTTP/1.1Host: cdn-s8.cfglobalcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hqq.tosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico HTTP/1.1Host: alluc.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://alluc.co/watch-movies/passengers.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M; HstCfa4329645=1734432721689; HstCla4329645=1734432721689; HstCmu4329645=1734432721689; HstPn4329645=1; HstPt4329645=1; HstCnv4329645=1; HstCns4329645=1; _gid=GA1.2.1188828421.1734432724; _ga_9H8DG4JWZ9=GS1.1.1734432724.1.0.1734432724.0.0.0; _ga=GA1.1.256623225.1734432724; __dtsu=51A0173443272670518C9622FCF8D1A8
Source: global traffic	HTTP traffic detected: GET /netu.php HTTP/1.1Host: videocdnmetrika.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60542517 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=11040624 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /js/video.counters.2.js?117 HTTP/1.1Host: hqq.toConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5QdbvW65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /hit?rhttps%3A//gomo.to/;s1280102424;uhttps%3A//hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09%26ad_level%3D3;0.2854298128206627 HTTP/1.1Host: counter.yadro.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check895654854.jpg HTTP/1.1Host: hqq.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=i5Qdbv*W65ADxM7mTXJhmv69RQQrEme
Source: global traffic	HTTP traffic detected: GET /dcm?pid=fdd0fe1d-1300-4eb1-b034-77552483084f&id=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxPfVU6jL0VqhlFAk64RrD4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=2; _cc_id=19a72782b558262c5c95264fea115e8f; _cc_cc="ACZ4nGNQMLRMNDcytzBKMjW1MDIzSjZNtjQ1MjNJS000NDRNtUhjAIL0xPA3DHDAe%2B%2BDJeMeLYb%2FjIwMPzZOYYGxl%2F8phDHPHT3EDGPv3ndZAMY%2BvHgOXHn7uqfcMHbDf00Y88njm4Yw9r0uLRjz0qlHbDD2uyUIU97MPMAEYwMAwG8%2Fgg%3D%3D"; _cc_aud="ABR4nGNgYGBITwx%2FwwADLAwMXDNADEat2RBqFojic3cAkgB76wTS"
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=70&user_id=2779555180576839789&ssp=liveintent HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=3cb309c3-fed4-435b-8990-a0deaa86e372; c=1734432785; tuuid_lu=1734432786
Source: global traffic	HTTP traffic detected: GET /f.php?sid=212040&ra=11880 HTTP/1.1Host: videocdnshop.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hqq.to/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flv/api/files/thumbs/2019/05/03/1556851369me0pr-640x480-1.jpg HTTP/1.1Host: cdn-s8.cfglobalcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: var e = a(["\n https://www.facebook.com/sharer/sharer.php\n ?u=", "\n &title=", "\n "]); equals www.facebook.com (Facebook)
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: var e = a(["\n https://www.linkedin.com/shareArticle\n ?mini=true\n &url=", "\n &title=", "\n &summary=", "\n &source=Classic\n "]); equals www.linkedin.com (Linkedin)
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_450.1.dr, chromecache_282.1.dr, chromecache_329.1.dr, chromecache_445.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: alluc.co
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 123images.co
Source: global traffic	DNS traffic detected: DNS query: s7.addthis.com
Source: global traffic	DNS traffic detected: DNS query: repetitiousfontmonopoly.com
Source: global traffic	DNS traffic detected: DNS query: gomo.to
Source: global traffic	DNS traffic detected: DNS query: s10.histats.com
Source: global traffic	DNS traffic detected: DNS query: s4.histats.com
Source: global traffic	DNS traffic detected: DNS query: e.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: p.dtsan.net
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: hqq.to
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: e.dlx.addthis.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: global.stun.twilio.com
Source: global traffic	DNS traffic detected: DNS query: counter.yadro.ru
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: deliver.vkcdnservice.com
Source: global traffic	DNS traffic detected: DNS query: a.labadena.com
Source: global traffic	DNS traffic detected: DNS query: wss.commentsmodule.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: stun2.l.google.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: commentsmodule.com
Source: global traffic	DNS traffic detected: DNS query: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: profitableexactly.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: tag.tapad.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: a.dtsan.net
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: thrtl.redinuid.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: nlsn.thrtle.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: partner.mediawallahscript.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: idsync.reson8.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: _8443._https.wss.commentsmodule.com
Source: global traffic	DNS traffic detected: DNS query: videocdnmetrika.com
Source: global traffic	DNS traffic detected: DNS query: cdn-s8.cfglobalcdn.com
Source: global traffic	DNS traffic detected: DNS query: videocdnshop.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=cnGR2Gv%2FnNFSEQJPvWBUUkPJUM7sWriT15jHOgkSfQzIsDRQiDARNE1tqMjVMBfszwcOWhD21ZiVANS9qTpG2TzmaPNUu8LVDt1pIltgfVwU28Tihvs1QVXgNA%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 407Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:51:19 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 39+RyecSQpEeC8spLVLNdFdcpAVH0WGuvUY=$B5B4WhvvlIwFzbXiReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X22CMFHQdv9TCYZ70mjog4xyvcxf77z930fgKSwPeYDRtCO8G0JmmpCS7YTIF%2Bh%2BWxVJPviqz%2BJmIbUb1w%2FWZAgO2y1YvphoqZd4sKOUJ9KxP5ExDfYWh6QqMg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8f365b773ac9de99-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1468&rtt_var=564&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1159&delivery_rate=1918528&cwnd=186&unsent_bytes=0&cid=3075686db0d38a88&ts=445&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:51:24 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 02/Gu0XX6ovyGrOynOpGL3VUl8w+JQrcEaA=$3woiB9jXfT9EVZTLServer: cloudflareCF-RAY: 8f365b9799575e61-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:51:30 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: BwjYwsrfJ29sDjgHFD6LMbxgeeMyKw2KSK4=$5Ka2R2RFzpICz+l/cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f365bbc9dfcc448-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:51:38 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Pg2QUO9r7M9LxYK/w43q6gobCZ0haQRmCy4=$kkDEUsx+nk78izHZServer: cloudflareCF-RAY: 8f365beb4916c434-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:51:42 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: dj+nbXO2rXsVA2oxdWluKbUk6+affge1Bh4=$Cq80rnNj78+Yz7Zqcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zww8usHCzOLG%2Fc8%2B5HbyL58%2BKYLUX2pBu0CUAn292wy1w3WZm65K4k11QoXmN5qPoerw1EmVEFPw8qK5s7Jc9p0SfALPco83YiaM82C2fgg35TbWHqiI1T2GvA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8f365c04fe077c9a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1883&min_rtt=1845&rtt_var=719&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1159&delivery_rate=1582655&cwnd=189&unsent_bytes=0&cid=6b45d9b1d00baa97&ts=453&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.19.5Date: Tue, 17 Dec 2024 10:51:58 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: repetitiousfontmonopoly.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:51:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:52:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:52:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Tue, 17 Dec 2024 10:52:03 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: repetitiousfontmonopoly.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Tue, 17 Dec 2024 10:52:03 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: repetitiousfontmonopoly.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:52:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:52:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 17 Dec 2024 10:52:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:52:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Origin-Location: /server: Google FrontendX-Cache-Status-Inferno: MISSX-Inferno-Location: /
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Tue, 17 Dec 2024 10:52:24 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: profitableexactly.com
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Dec 2024 10:53:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingserver: Google FrontendX-Inferno-Location: static

Source: chromecache_347.1.dr	String found in binary or memory: http://blog.deconcept.com/2006/01/11/getvariable-setvariable-crash-internet-explorer-flash-6/
Source: chromecache_419.1.dr	String found in binary or memory: http://bxcreative.com
Source: chromecache_419.1.dr	String found in binary or memory: http://bxslider.com
Source: chromecache_415.1.dr	String found in binary or memory: http://cssreset.com
Source: chromecache_364.1.dr	String found in binary or memory: http://dean.edwards.name/weblog/2006/06/again/
Source: chromecache_249.1.dr	String found in binary or memory: http://fonts.googleapis.com/css?family=Oswald
Source: chromecache_260.1.dr, chromecache_372.1.dr	String found in binary or memory: http://javascript.nwbox.com/ContentLoaded/
Source: chromecache_260.1.dr, chromecache_372.1.dr	String found in binary or memory: http://javascript.nwbox.com/ContentLoaded/MIT-LICENSE
Source: chromecache_419.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_260.1.dr, chromecache_372.1.dr	String found in binary or memory: http://stackoverflow.com/questions/11929099/html5-canvas-drawimage-ratio-bug-ios
Source: chromecache_419.1.dr	String found in binary or memory: http://stevenwanderski.com
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: http://videojs.com/
Source: chromecache_281.1.dr, chromecache_270.1.dr, chromecache_410.1.dr, chromecache_219.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_364.1.dr	String found in binary or memory: http://www.devira.com
Source: chromecache_260.1.dr, chromecache_372.1.dr	String found in binary or memory: http://www.dropzonejs.com)
Source: chromecache_364.1.dr	String found in binary or memory: http://www.gnu.org/copyleft/lesser.html
Source: chromecache_364.1.dr	String found in binary or memory: http://www.walterzorn.com
Source: chromecache_364.1.dr	String found in binary or memory: http://www.walterzorn.de
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12311450972-poster-Tokyo-Shaking.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/1231337707-poster-Tache.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/1231355644-poster-Passengers.jpg);
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12315497092-poster-Don-Q.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12320562862-poster-Bigfoot-vs-Krampus.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12321158916-poster-Wineville.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12327191509-poster-Martingale.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12328215740-poster-The-Undeserving.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12328652996-poster-Carnage-for-Christmas.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/12330989112-poster-Sinister-Surgeon.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg
Source: chromecache_337.1.dr	String found in binary or memory: https://123images.co/movies/1239411900-poster-Back-Home.jpg
Source: chromecache_347.1.dr	String found in binary or memory: https://127.0.0.1/no_video.mp4.m3u8
Source: chromecache_430.1.dr, chromecache_404.1.dr	String found in binary or memory: https://6rf7dt.cfeucdn.com/silverlight/secip/104712/8359/6qCVxOdQ4s-oVwG0pzgINg/MjEzLjg3LjE2MS4xNTg=
Source: chromecache_332.1.dr, chromecache_400.1.dr, chromecache_346.1.dr	String found in binary or memory: https://a.dtsan.net
Source: chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_330.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_244.1.dr, chromecache_359.1.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_229.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
Source: chromecache_337.1.dr	String found in binary or memory: https://alluc.co
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_377.1.dr, chromecache_251.1.dr	String found in binary or memory: https://blog.videojs.com/feature-spotlight-advanced-plugins/
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_450.1.dr, chromecache_282.1.dr, chromecache_329.1.dr, chromecache_445.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_347.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/lazysizes
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://cdn.tynt.com/afwu.js
Source: chromecache_347.1.dr	String found in binary or memory: https://devstreaming-cdn.apple.com/videos/streaming/examples/img_bipbop_adv_example_ts/master.m3u8
Source: chromecache_270.1.dr, chromecache_410.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_410.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_261.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Material
Source: chromecache_236.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_334.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_255.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_254.1.dr, chromecache_443.1.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_246.1.dr, chromecache_360.1.dr	String found in binary or memory: https://github.com/ctd1500/videojs-hotkeys
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://github.com/kesla/parse-headers/
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://github.com/kesla/parse-headers/blob/master/LICENCE
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://github.com/mozilla/vtt.js
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://github.com/mozilla/vtt.js/blob/main/LICENSE
Source: chromecache_314.1.dr, chromecache_271.1.dr	String found in binary or memory: https://github.com/sitexw/FuckAdBlock
Source: chromecache_260.1.dr, chromecache_372.1.dr	String found in binary or memory: https://github.com/stomita/ios-imagefile-megapixel
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://github.com/videojs/video.js/blob/main/LICENSE
Source: chromecache_229.1.dr	String found in binary or memory: https://gomo.to/decoding_v3.php
Source: chromecache_229.1.dr	String found in binary or memory: https://gomo.to/dsPlayer/dropzone.js
Source: chromecache_229.1.dr	String found in binary or memory: https://gomo.to/dsPlayer/player.css
Source: chromecache_229.1.dr	String found in binary or memory: https://gomo.to/movie/passengers?src=
Source: chromecache_229.1.dr	String found in binary or memory: https://gomo.to/public/images/favicon.png
Source: chromecache_347.1.dr	String found in binary or memory: https://google.com
Source: chromecache_230.1.dr, chromecache_310.1.dr	String found in binary or memory: https://kimmobrunfeldt.github.io/progressbar.js
Source: chromecache_430.1.dr, chromecache_404.1.dr	String found in binary or memory: https://netu.ac/ajax.php?mode=copy_video&vid=
Source: chromecache_347.1.dr	String found in binary or memory: https://netu.ac/view_page.php?pid=8
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://netu.tv/
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://p.dtsan.net/dtsa.js
Source: chromecache_330.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_450.1.dr, chromecache_282.1.dr, chromecache_329.1.dr, chromecache_445.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_300.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_345.1.dr, chromecache_342.1.dr, chromecache_211.1.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_345.1.dr, chromecache_342.1.dr, chromecache_211.1.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://pinterest.com/pin/create/button/
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://plus.google.com/share
Source: chromecache_351.1.dr	String found in binary or memory: https://putstream.com/player/newplay.png
Source: chromecache_422.1.dr, chromecache_258.1.dr	String found in binary or memory: https://site.com
Source: chromecache_450.1.dr, chromecache_329.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_233.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_253.1.dr, chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_345.1.dr, chromecache_342.1.dr, chromecache_211.1.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_287.1.dr, chromecache_366.1.dr, chromecache_409.1.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_450.1.dr, chromecache_282.1.dr, chromecache_329.1.dr, chromecache_445.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://twitter.com/intent/tweet
Source: chromecache_347.1.dr	String found in binary or memory: https://v.xtapes.to/wp-content/uploads/xtapes2.png
Source: chromecache_392.1.dr, chromecache_368.1.dr	String found in binary or memory: https://www.brightcove.com/
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_282.1.dr, chromecache_445.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_330.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_290.1.dr, chromecache_300.1.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_347.1.dr	String found in binary or memory: https://www.google.com/chrome/
Source: chromecache_347.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6Ldf5F0UAAAAALErn6bLEcv7JldhivPzb93Oy5t9
Source: chromecache_436.1.dr, chromecache_403.1.dr, chromecache_450.1.dr, chromecache_282.1.dr, chromecache_329.1.dr, chromecache_445.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_347.1.dr	String found in binary or memory: https://www.googleapis.com/urlshortener/v1/url?key=
Source: chromecache_330.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_229.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-153655914-1
Source: chromecache_337.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-156493615-1
Source: chromecache_265.1.dr, chromecache_338.1.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://www.linkedin.com/shareArticle
Source: chromecache_450.1.dr, chromecache_329.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_393.1.dr, chromecache_200.1.dr	String found in binary or memory: https://www.tumblr.com/share
Source: chromecache_347.1.dr	String found in binary or memory: https://xtapes.to

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443

Source: classification engine

Classification label: mal60.phis.troj.win@29/419@321/91

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1856,i,4275831533134915997,9852716672962275646,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alluc.co/watch-movies/passengers.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1856,i,4275831533134915997,9852716672962275646,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_347.1.dr

Binary or memory string: AdscoreInit('QupoAAAAAAAA7baqJVmCi18vNdxVq-qt4r2I960', {

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Multi-hop Proxy	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Proxy	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	3 Ingress Tool Transfer	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://alluc.co/watch-movies/passengers.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://dean.edwards.name/weblog/2006/06/again/	0%	Avira URL Cloud	safe
https://gomo.to/movie/passengers	0%	Avira URL Cloud	safe
https://gomo.to/loading.gif	0%	Avira URL Cloud	safe
https://123images.co/movies/12328215740-poster-The-Undeserving.jpg	0%	Avira URL Cloud	safe
https://alluc.co/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://alluc.co/images/logo-footer.png	0%	Avira URL Cloud	safe
http://www.walterzorn.de	0%	Avira URL Cloud	safe
https://alluc.co/images/favicon.ico	0%	Avira URL Cloud	safe
https://kimmobrunfeldt.github.io/progressbar.js	0%	Avira URL Cloud	safe
https://alluc.co/css/fonts/fontawesome-webfont.woff2?v=4.3.0	0%	Avira URL Cloud	safe
https://123images.co/movies/12321158916-poster-Wineville.jpg	0%	Avira URL Cloud	safe
https://alluc.co/favicon.ico	0%	Avira URL Cloud	safe
https://123images.co/movies/12330989112-poster-Sinister-Surgeon.jpg	0%	Avira URL Cloud	safe
https://alluc.co/images/logo-light.png	0%	Avira URL Cloud	safe
http://bxslider.com	0%	Avira URL Cloud	safe
https://123images.co/movies/1231355644-poster-Passengers.jpg);	0%	Avira URL Cloud	safe
https://alluc.co/images/bg.jpg	0%	Avira URL Cloud	safe
https://alluc.co/js/movies.min.js?v=1.6	0%	Avira URL Cloud	safe
https://123images.co/movies/12327191509-poster-Martingale.jpg	0%	Avira URL Cloud	safe
https://alluc.co/js/slider_v04.js	0%	Avira URL Cloud	safe
https://alluc.co/js/load.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
um.simpli.fi	35.204.158.49	true	false	high
a.dtsan.net	104.21.91.54	true	false	high
spl.zeotap.com	104.22.50.98	true	false	high
live.rezync.com	52.84.174.78	true	false	high
ec2-52-66-194-55.ap-south-1.compute.amazonaws.com	52.66.194.55	true	false	unknown
cdn.w55c.net	35.210.130.15	true	false	high
httplogserver-lb.global.unified-prod.sharethis.net	52.59.126.205	true	false	high
mwzeom.zeotap.com	172.67.40.173	true	false	high
ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com	35.75.86.132	true	false	high
api.intentiq.com	99.86.91.52	true	false	high
sync.crwdcntrl.net	13.228.48.14	true	false	high
s4.histats.com	149.56.240.127	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
alluc.co	172.67.183.59	true	false	high
cm.g.doubleclick.net	172.217.17.34	true	false	high
idaas-ext.cph.liveintent.com	52.55.72.170	true	false	high
www.google.com	142.250.181.132	true	false	high
p.dtsan.net	104.21.91.54	true	false	high
dcs-ups.g03.yahoodns.net	188.125.88.204	true	false	high
sync.intentiq.com	13.249.9.126	true	false	high
bcp.crwdcntrl.net	3.1.88.234	true	false	high
match.adsrvr.org	52.223.40.198	true	false	high
videocdnshop.com	172.67.199.179	true	false	high
s8.netu.tv	213.186.120.178	true	false	unknown
t.dtscout.com	141.101.120.10	true	false	high
pixel.onaudience.com	54.38.113.6	true	false	high
d2ctznuk6ro1vp.cloudfront.net	18.165.220.65	true	false	high
profitableexactly.com	172.240.108.68	true	false	high
123images.co	172.67.198.22	true	false	high
googleads.g.doubleclick.net	172.217.19.2	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
ml314.com	34.117.77.79	true	false	high
unpkg.com	104.17.247.203	true	false	high
stun.l.google.com	74.125.250.129	true	false	high
mc.yandex.ru	87.250.251.119	true	false	high
commentsmodule.com	172.67.198.57	true	false	high
raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com	44.224.20.21	true	false	high
mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com	52.87.7.90	true	false	high
simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com	34.243.110.68	true	false	high
stun2.l.google.com	74.125.250.129	true	false	high
hqq.to	190.115.19.71	true	false	high
repetitiousfontmonopoly.com	192.243.59.12	true	false	high
www.recaptcha.net	172.217.19.163	true	false	high
de.tynt.com	67.202.105.32	true	false	high
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false	high
wss.commentsmodule.com	51.195.4.167	true	false	high
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
a.labadena.com	136.243.70.253	true	false	high
ps.eyeota.net	3.124.210.90	true	false	high
counter.yadro.ru	88.212.202.52	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
tag.tapad.com	35.186.225.155	true	false	high
pixel.33across.com	67.202.105.23	true	false	high
i.simpli.fi	35.204.89.238	true	false	high
rtb.adentifi.com	100.26.82.223	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.212.192.25	true	false	high
sync.srv.stackadapt.com	35.170.46.82	true	false	high
thrtle.com	52.204.65.193	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
gomo.to	31.42.184.242	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
s.amazon-adsystem.com	98.82.158.241	true	false	high
videocdnmetrika.com	104.21.38.98	true	false	high
track2.securedvisit.com	44.217.149.174	true	false	high
tags.crwdcntrl.net	108.139.60.56	true	false	high
thirdparty-logserver-lb.global.unified-prod.sharethis.net	18.196.145.126	true	false	high
t.dtscdn.com	104.26.12.60	true	false	high
nlsn.thrtle.com	52.6.98.243	true	false	high
e.dtscout.com	141.101.120.10	true	false	high
ic.tynt.com	67.202.105.31	true	false	high
0i0i0i0.com	136.243.70.253	true	false	high
ib.anycast.adnxs.com	37.252.171.53	true	false	high
pm.w55c.net	unknown	unknown	false	high
ssc-cms.33across.com	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
_8443._https.wss.commentsmodule.com	unknown	unknown	true	unknown
secure.adnxs.com	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
ce.lijit.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
thrtl.redinuid.imrworldwide.com	unknown	unknown	false	high
global.stun.twilio.com	unknown	unknown	false	high
i.w55c.net	unknown	unknown	false	high
p.rfihub.com	unknown	unknown	false	high
sync.sharethis.com	unknown	unknown	false	high
deliver.vkcdnservice.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
t.sharethis.com	unknown	unknown	false	high
image6.pubmatic.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
d.agkn.com	unknown	unknown	false	high
aqfer.lijit.com	unknown	unknown	false	high
cdn-s8.cfglobalcdn.com	unknown	unknown	false	high
cdn.tynt.com	unknown	unknown	false	high
agent.intentiq.com	unknown	unknown	false	high
idsync.reson8.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%252C%252C&gdpr=0&gdpr_consent=	false		high
https://gomo.to/loading.gif	false	Avira URL Cloud: safe	unknown
https://s4.histats.com/stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w	false		high
https://pippio.com/api/sync?it=1&pid=500040&_=1734432775.283112&iv=8ddcff7c-cab1-4857-898b-252123550b27:1734432775.2811596	false		high
https://unpkg.com/videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.css	false		high
https://dpm.demdex.net/ibs:dpid=540&dpuuid=43e7a474-a419-4060-8143-88849fca883d&redir=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DADB%26partner_device_id%3D%24%7BDD_UUID%7D%26pt%3D43e7a474-a419-4060-8143-88849fca883d%252C%252C	false		high
https://a.dtsan.net/a	false		high
https://aa.agkn.com/adscores/g.pixel?sid=9202273308&_puid=2x19hhHue5vGNNPef0uQt8rHEfLNG8BngAPLDvazLGds&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90%26uid%3D	false		high
https://hqq.to/js/video.js/7/videojs-hlsjs-plugin.1.3.5.js	false		high
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=1512&partner_device_id=na&gdpr=0&gdpr_consent=	false		high
https://ps.eyeota.net/match?bid=6j5b2cv&uid=23541675871998615043844100288184115988&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	false		high
https://thrtle.com/sync?vxii_pid=7006&vxii_pdid=24c80899-7976-4235-9836-42616b6b4dec&us_privacy=1YN-	false		high
https://thrtle.com/sync?vxii_pid=5044&vxii_pdid=lrhR-Xu2Vn5xeulD3h3wrAgue70&_t=1734432764	false		high
https://123images.co/movies/12328215740-poster-The-Undeserving.jpg	false	Avira URL Cloud: safe	unknown
https://alluc.co/css/fonts/fontawesome-webfont.woff2?v=4.3.0	false	Avira URL Cloud: safe	unknown
https://unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js	false		high
https://gomo.to/movie/passengers	false	Avira URL Cloud: safe	unknown
https://unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js	false		high
https://t.dtscout.com/pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c	false		high
https://pm.w55c.net/ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90	false		high
https://ce.lijit.com/merge?pid=5001&3pid=19a72782b558262c5c95264fea115e8f	false		high
https://dpm.demdex.net/ibs:dpid=30064&dpuuid=193d43f4ed7-2e810000010f5c6e&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90	false		high
https://mc.yandex.ru/metrika/tag.js	false		high
https://thrtle.com/sync?vxii_pid=5038&vxii_pdid=y-3zke5A1E2oT0PR183UNgLTs55LLHss.ywNxnKA--~A	false		high
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1734432773011.1&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8	false		high
https://a.nel.cloudflare.com/report/v4?s=kQfwt7Pk%2Ba%2BC12%2FIbRzQYobQeLLiq4VMygEl9jJQ0DpqgAPGfTqALr%2BvJCDAz9HFmoknivAkM2WJF%2F9xanEKgCztgNjr7kdQ8pHNmxinF%2B6acx3FEkrWaIilvg%3D%3D	false		high
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=J2KMAQZHBi96bc9jRXet1Ayp&rnd=1734432780514	false		high
https://alluc.co/images/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ssc-cms.33across.com/ps/?ts=1734432773011.2&ri=4&ru=https%3A%2F%2Fpartner.mediawallahscript.com%2F%3Faccount_id%3D1029%26partner_id%3D936a40b7%26uid%3D33XUSERID33X%26custom%3D%26tag_format%3Dimg%26tag_action%3Dsync	false		high
https://pd.sharethis.com/pd/dtscout	false		high
https://ps.eyeota.net/match?bid=c9gd69u&uid=232093305099003581238	false		high
https://alluc.co/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://alluc.co/images/logo-footer.png	false	Avira URL Cloud: safe	unknown
https://hqq.to/js/video.jquery_plugs/modernizr.js?12	false		high
https://hqq.to/js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.js?11	false		high
https://hqq.to/js/video.js/pip/pip.css?23	false		high
https://ps.eyeota.net/match?bid=7ri0rgu&uid=C3C9ACED-CFCA-4787-B7C7-77CCE2BCAA3F	false		high
https://123images.co/movies/12321158916-poster-Wineville.jpg	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=5003&vxii_pdid=19a72782b558262c5c95264fea115e8f&vxii_ts=4&_t=1734432755	false		high
https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=fe2ac9ca-b945-43f1-8098-0ca8b20378a0&vxii_rmax=2	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1512&partner_device_id=J2KMAQZHBi96bc9jRXet1Ayp&gdpr=0&gdpr_consent=	false		high
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false		high
https://unpkg.com/@silvermine/videojs-chromecast@1.3.2/dist/silvermine-videojs-chromecast.min.js	false		high
https://ml314.com/csync.ashx?fp=650769d44d2769074c8410e9f916366c1b1cbadc0a96fd995b857c6f13f7cc6cf4cb09cee1a4f8eb&person_id=3649183083493064749&eid=50082	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%2C%2C	false		high
https://alluc.co/favicon.ico	false	Avira URL Cloud: safe	unknown
https://unpkg.com/@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.css	false		high
https://hqq.to/js/d_check.js?35	false		high
https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=68680681fa4ed80c	false		high
https://partner.mediawallahscript.com/?account_id=1029&partner_id=936a40b7&uid=212922084710172&custom=&tag_format=img&tag_action=sync	false		high
https://ps.eyeota.net/match?bid=r8hrb20&uid=nil&dc_rc=3&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	false		high
https://unpkg.com/jquery@2.2.4/dist/jquery.min.js	false		high
https://thrtl.redinuid.imrworldwide.com/thrtl?url=https%3A%2F%2Fnlsn.thrtle.com%2Fsync%3Fvxii_pid%3D5036%26vxii_ts%3D7	false		high
https://alluc.co/images/bg.jpg	false	Avira URL Cloud: safe	unknown
https://123images.co/movies/12330989112-poster-Sinister-Surgeon.jpg	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=ADB&partner_device_id=23541675871998615043844100288184115988&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C	false		high
https://alluc.co/images/logo-light.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8f365b70ac0041af/1734432682624/c6bba5d7ab5d02a2179f1ee2daa5f799583ae325c0767023a7b7f6a7cbe65851/mbyYJbCYGAkTQGK	false		high
https://t.dtscout.com/pv/?_a=v&_h=gomo.to&_ss=670z4oxb1e&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=gmr4&_cb=_dtspv.c	false		high
https://sync.srv.stackadapt.com/sync?nid=throtle	false		high
https://hqq.to/js/video.counters.2.js?117	false		high
https://match.adsrvr.org/track/cmb/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0	false		high
https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID&rdf=1	false		high
https://123images.co/movies/12327191509-poster-Martingale.jpg	false	Avira URL Cloud: safe	unknown
https://videocdnmetrika.com/netu.php	false		high
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1734432742169	false		high
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	false		high
https://s.amazon-adsystem.com/dcm?pid=fdd0fe1d-1300-4eb1-b034-77552483084f&id=	false		high
https://alluc.co/js/slider_v04.js	false	Avira URL Cloud: safe	unknown
https://track2.securedvisit.com/sync/1540_03681?id=J2KMAQZHBi96bc9jRXet1Ayp	false		high
https://alluc.co/js/movies.min.js?v=1.6	false	Avira URL Cloud: safe	unknown
https://mwzeom.zeotap.com/mw?google_gid=CAESEDqOsxIRfrLl-4FWjx9P3oI&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332	false		high
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=Entertainment%2FCelebrities&us_privacy=&random=1734432773011.3	false		high
https://hqq.to/js/websocket_ip.min.js	false		high
https://alluc.co/js/load.js	false	Avira URL Cloud: safe	unknown
https://sync.sharethis.com/ttd?uid=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&gdpr=0&gdpr_consent=	false		high
https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1734432780498	false		high
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_450.1.dr, chromecache_329.1.dr, chromecache_362.1.dr, chromecache_330.1.dr	false		high
https://netu.ac/view_page.php?pid=8	chromecache_347.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_242.1.dr, chromecache_317.1.dr, chromecache_233.1.dr	false		high
https://github.com/stomita/ios-imagefile-megapixel	chromecache_260.1.dr, chromecache_372.1.dr	false		high
https://www.google.com/chrome/	chromecache_347.1.dr	false		high
https://github.com/sitexw/FuckAdBlock	chromecache_314.1.dr, chromecache_271.1.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_233.1.dr	false		high
http://www.walterzorn.de	chromecache_364.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/kesla/parse-headers/	chromecache_392.1.dr, chromecache_368.1.dr	false		high
https://kimmobrunfeldt.github.io/progressbar.js	chromecache_230.1.dr, chromecache_310.1.dr	false	Avira URL Cloud: safe	unknown
http://dean.edwards.name/weblog/2006/06/again/	chromecache_364.1.dr	false	Avira URL Cloud: safe	unknown
https://pinterest.com/pin/create/button/	chromecache_393.1.dr, chromecache_200.1.dr	false		high
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	chromecache_345.1.dr, chromecache_342.1.dr, chromecache_211.1.dr	false		high
https://www.tumblr.com/share	chromecache_393.1.dr, chromecache_200.1.dr	false		high
https://github.com/ctd1500/videojs-hotkeys	chromecache_246.1.dr, chromecache_360.1.dr	false		high
https://github.com/videojs/video.js/blob/main/LICENSE	chromecache_392.1.dr, chromecache_368.1.dr	false		high
https://123images.co/movies/1231355644-poster-Passengers.jpg);	chromecache_337.1.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet	chromecache_393.1.dr, chromecache_200.1.dr	false		high
http://bxslider.com	chromecache_419.1.dr	false	Avira URL Cloud: safe	unknown
https://www.brightcove.com/	chromecache_392.1.dr, chromecache_368.1.dr	false		high
https://netu.tv/	chromecache_393.1.dr, chromecache_200.1.dr	false		high
https://plus.google.com/share	chromecache_393.1.dr, chromecache_200.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.44.89	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.183.59	alluc.co	United States	13335	CLOUDFLARENETUS	false
35.210.130.15	cdn.w55c.net	United States	19527	GOOGLE-2US	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
18.165.220.65	d2ctznuk6ro1vp.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
98.82.156.207	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
51.195.4.167	wss.commentsmodule.com	France	16276	OVHFR	false
3.124.210.90	ps.eyeota.net	United States	16509	AMAZON-02US	false
104.17.249.203	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
37.252.171.53	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
108.139.60.56	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
172.67.198.22	123images.co	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
172.67.167.79	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
100.26.82.223	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
192.243.59.12	repetitiousfontmonopoly.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
88.212.202.52	counter.yadro.ru	Russian Federation	39134	UNITEDNETRU	false
190.115.19.71	hqq.to	Belize	262254	DDOS-GUARDCORPBZ	false
104.21.38.98	videocdnmetrika.com	United States	13335	CLOUDFLARENETUS	false
35.170.46.82	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
104.21.91.54	a.dtsan.net	United States	13335	CLOUDFLARENETUS	false
172.67.40.173	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
52.55.72.170	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
31.42.184.242	gomo.to	Ukraine	30860	YURTEH-ASUA	false
172.217.19.163	www.recaptcha.net	United States	15169	GOOGLEUS	false
99.86.91.52	api.intentiq.com	United States	16509	AMAZON-02US	false
34.243.110.68	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com	United States	16509	AMAZON-02US	false
18.196.145.126	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
172.67.198.57	commentsmodule.com	United States	13335	CLOUDFLARENETUS	false
213.186.120.178	s8.netu.tv	Ukraine	6849	UKRTELNETUA	false
52.84.174.78	live.rezync.com	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.59.126.205	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
13.249.9.126	sync.intentiq.com	United States	16509	AMAZON-02US	false
13.228.48.14	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
172.217.19.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.155.129.21	unknown	United States	16509	AMAZON-02US	false
172.240.108.68	profitableexactly.com	United States	7979	SERVERS-COMUS	false
104.22.50.98	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
104.17.247.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
52.6.98.243	nlsn.thrtle.com	United States	14618	AMAZON-AESUS	false
35.204.158.49	um.simpli.fi	United States	15169	GOOGLEUS	false
52.87.7.90	mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com	United States	14618	AMAZON-AESUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
35.234.162.151	unknown	United States	15169	GOOGLEUS	false
18.184.216.10	unknown	United States	16509	AMAZON-02US	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
149.56.240.129	unknown	Canada	16276	OVHFR	false
172.67.74.186	unknown	United States	13335	CLOUDFLARENETUS	false
52.212.192.25	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
149.56.240.127	s4.histats.com	Canada	16276	OVHFR	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
98.82.158.241	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
172.217.17.34	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.178.16.127	unknown	United States	16509	AMAZON-02US	false
44.224.20.21	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
54.39.128.162	unknown	Canada	16276	OVHFR	false
44.217.149.174	track2.securedvisit.com	United States	14618	AMAZON-AESUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
104.26.12.60	t.dtscdn.com	United States	13335	CLOUDFLARENETUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
141.101.120.11	unknown	European Union	13335	CLOUDFLARENETUS	false
3.1.88.234	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
141.101.120.10	t.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
67.202.105.23	pixel.33across.com	United States	32748	STEADFASTUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
54.225.117.250	unknown	United States	14618	AMAZON-AESUS	false
35.186.225.155	tag.tapad.com	United States	15169	GOOGLEUS	false
52.197.189.192	unknown	United States	16509	AMAZON-02US	false
54.38.113.6	pixel.onaudience.com	France	16276	OVHFR	false
104.22.51.98	unknown	United States	13335	CLOUDFLARENETUS	false
192.243.61.227	unknown	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
67.202.105.33	unknown	United States	32748	STEADFASTUS	false
67.202.105.32	de.tynt.com	United States	32748	STEADFASTUS	false
67.202.105.31	ic.tynt.com	United States	32748	STEADFASTUS	false
35.75.86.132	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.204.65.193	thrtle.com	United States	14618	AMAZON-AESUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
136.243.70.253	a.labadena.com	Germany	24940	HETZNER-ASDE	false
35.204.89.238	i.simpli.fi	United States	15169	GOOGLEUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
188.125.88.204	dcs-ups.g03.yahoodns.net	United Kingdom	10310	YAHOO-1US	false
35.173.214.6	unknown	United States	14618	AMAZON-AESUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.23
192.168.2.13

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576678
Start date and time:	2024-12-17 11:50:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://alluc.co/watch-movies/passengers.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.troj.win@29/419@321/91
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.37.35, 64.233.163.84, 172.217.17.78, 142.250.181.142, 142.250.200.238, 199.232.214.172, 172.217.17.46, 172.217.19.10, 172.217.21.42, 172.217.17.42, 172.217.19.202, 172.217.17.74, 172.217.19.234, 142.250.181.138, 142.250.181.106, 142.250.181.42, 216.58.208.234, 142.250.181.74, 172.217.19.170, 142.250.181.104, 104.20.3.69, 104.20.2.69, 172.217.19.46, 142.250.181.14, 142.250.201.42, 142.250.201.40, 172.217.17.35, 95.101.110.33, 95.101.110.53, 104.18.13.146, 104.18.12.146, 2.21.69.146, 2.19.51.163, 142.250.181.98, 142.250.181.91, 142.250.181.123, 142.250.181.155, 172.217.17.59, 172.217.17.91, 172.217.19.219, 172.217.21.59, 172.217.19.27, 172.217.19.187, 172.217.19.251, 216.58.211.219, 142.251.37.187, 142.250.201.27, 142.251.37.251, 172.217.21.27, 142.250.203.251, 172.217.171.219, 216.58.212.123, 172.217.18.59, 142.250.201.59, 142.250.200.219, 172.217.19.59, 142.250.200.251, 142.251.37.59, 172.217.18.251, 142.251.37.219, 95.101.110.7, 95.101.110.64, 142.250.200.202
Excluded domains from analysis (whitelisted): vkcdnservice.appspot.com.storage.googleapis.com, storage.googleapis.com, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, clientservices.googleapis.com, e213908.b.akamaiedge.net, cdn.tynt.com.cdn.cloudflare.net, track.adformnet.akadns.net, l-0005.l-msedge.net, clients2.google.com, redirector.gvt1.com, login.live.com, www.googletagmanager.com, a24365-c026.edgekey.net, cert1.a1.atm.aqfer.net.edgekey.net, e167121.b.akamaiedge.net, update.googleapis.com, a.rfihub.com.akadns.net, agent.intentiq.com.akamaized.net, s10.histats.com.cdn.cloudflare.net, www.gstatic.com, www.google-analytics.com, www.bing.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, idsync.reson8.com.cdn.cloudflare.net, imasdk.googleapis.com, ctldl.windowsupdate.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://alluc.co/watch-movies/passengers.html

Input	Output
URL: https://alluc.co Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://alluc.co
URL: https://alluc.co/watch-movies/passengers.html... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script uses the `document.write()` function to dynamically insert an iframe element with a suspicious source URL. This behavior is considered high-risk as it can potentially lead to the execution of remote or untrusted code, which could be used for malicious purposes such as phishing or drive-by downloads. The use of Base64 encoding to obfuscate the iframe source URL further increases the risk score." }
document.write(Base64.decode("PGlmcmFtZSBzdHlsZT0id2lkdGg6MTAwJTtoZWlnaHQ6MTAwJTsiIGFsbG93ZnVsbHNjcmVlbiB3ZWJraXRhbGxvd2Z1bGxzY3JlZW4gbW96YWxsb3dmdWxsc2NyZWVuIGZyYW1lYm9yZGVyPSIwIiBzcmM9Ii93YXRjaGluZy9wYXNzZW5nZXJzX19aSlhFQUdlbDJZX19tb3ZpZS8iIHNjcm9sbGluZz0ibm8iPjwvaWZyYW1lPg=="));
URL: https://alluc.co/watch-movies/passengers.html... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, obfuscated code, and redirects to suspicious domains. While some contextual factors, such as the script's apparent purpose of loading a movie streaming page, may suggest legitimate use, the overall aggressive and opaque nature of the code raises significant security concerns. Further investigation is warranted to determine the true intent and potential impact of this script." }
(function(){window._cf_chl_opt={cvId: '3',cZone: "alluc.co",cType: 'managed',cRay: '8f365b3ddae142a1',cH: 'u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP',cUPMDTk: "\/watch-movies\/passengers.html?__cf_chl_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8",cFPWv: 'g',cITimeS: '1734432670',cTTimeMs: '1000',cMTimeMs: '390000',cTplC: 0,cTplV: 5,cTplB: 'cf',cK: "",fa: "\/watch-movies\/passengers.html?__cf_chl_f_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8",md: "8zn.KnNmmq_EoJdAGZTRVJbNwv2SKl6J5NyT4J7Dh6A-1734432670-1.2.1.1-sdJFpSfBwHIbUBgNe7p5dSjMRn_GzPFkW1nhP1Eiip.gV2Bc3X6IuMplNv3B1hw0RzmnaDTvw828TNTCcFz_7J1cgqEvmc5hXla7vBWGgtEv2LwvFykSxBT2f0pfGuod0K6YG0Po6q79T.M28mXVG_TY7.RaGOdXIK3QtOghJVHhCsj3bmMpvSDu_nUbqXlPi.c3c98eAQHJ80A.FSrHX30_aeJE7EVMdxOm7a1GgDR78o3b1Y9wCcMjtfvvBIEoTw6XlaBBon_iXasFvyFmm8FC5fMIzUbVt1zYt9GM0OW7rmkQ3LmTG5.dzhsJiglZBg.eKe3aTgX13kko62TgTTRts5V098TfZypttBvO2nuXjAr_Pgoon2DljKbVfO__Bw1Zq_w0eKVUNy1JMQG_WjCQfsPGIqg3aVzndGJZb5iTX2DsE7mVtx8KXwI.TgF2jCOQ8owDtOmGuPAwD8NN.vXVBnTOhioY4xdgd7c0IF5cwhbpP1pPgz7kKivhg_sV8F9yo1A2yZtDitbyhUBk_9LZC15tRC29jfAmPE.ZU.BDZtmCcR_.DNayfCQ8hupGvN1YFwgyE_J9eTiyaL5QsEPlha_T6VAHC3FCWobN2TxIIYU1I2A3a24AGk5KyXnZoNKbDuo8.19IzJRthrQjh0S9.1UUitMidtrcV2L4S5HIl_plgvlwLF6Pnh5QoD.7oFhIYDmu5F.gNILZqOCvomdyRksN4Qyo3F0OLZCM7bENP2846LGwiNgKz88HTvyR2PraRBjuxEaR73Ohd.3jCKuxojS2ttBIb79RDTARkOpf6G9O8CcAECFcS9WJ8tGhkqMfIAuHboZ8HjNm3fc1E5xDRO0p1uOfUmKvhoyjjhBVOFyW24lJKk8SQOPv_PrdSnMXgqRXxpP7DfTf2mrSswcfszlr7T54fysvhF1ug5SQmNZEsXhNs.p_ntoU5eDBa5rqoaJD.PS356mAQfZ3ZxqVuqXK1kICSQ4cxMOiXVh3AVh8NojkEeZS4w3tU2vzRGnyJNtxrDEPBS_0dYFcFZeWDpK3..dTxgFWjRWE8RsdXhw3TMuIRwLtTQr8K3ZC72tgu1AOReD_bl2Lew1HYEUAktZWxv8NwEURzEISgBAWeSP4WJSNkyZ5JPvRd6hpqvJgwZt7iXFjYJ3AGU.ekeIpAjuPEnYCsGhsVnjx9ZmeJJC8A5KAC.JaqOQD0tDDKT97aUBgOQQkihdZrX.PB8KxsZnftJMI1ZFypFNPSrHqP3XeR8Lw8aooBLAzkwsRFDugexW3f5h8ToObXOx.mxaerSZ4FaTejPq8pfhURYirNFNhFL5G7I9IfXDEt4KMqOHsaVuKzxzzxUZv.fRHC25rKEZ63LE_4bko5TGPTl1Wh9wpHb3rPpueG3pffoQNDmMAKY_KJLVcZA8NQaA4fR_K.NyzvuGDi8LRC4WCoa5k7uZ9pg7d36egZ5X6HnSSrGjzCTW0WwyPIw.1ZvTkndZVOOXVkxGF49xPMvLavtsH_UDQwIKSU2Jfh_6O4KTtCnN72pjKlY51Q70rTzPhvDIafdv7cjdl6.G8gHw.CFf3XcVRwmV284veC_q8Tg2qBuitWPiuZW9bsOTW8SnrVsj4BNd7GrfMdzap6m69CAWIz_PHyxZd4pgaQ0ynHP0m90QlboV8CaikocMScCpVZn6VGhage..yP33VU3isAnmYihmy3oNy37yFzfDj70YbkV55qMKlg2D1n11ArF2gWXA5rCx5MkdVw3oOCbbvEhVGKhLeeSaCIZMeH79HEEY7VJ_dXYAJrmktc0rfZdk.eYCfOUkLO7KEqObZLqgm8s0MfGB8pdVxtUAqGkw4mq6MEzSsGgeIuLHRY76sA4bNtqw9vqDepQ_vefznmPBCp.wV4eH28vGMPL4xOHRmph.u_X_MUzGlYPmIY0Lds4ySimQcGwpZxnsW4x0ybP6kit.hEDrKQSU4enYjETu2O7yphVx_RaxINKPorZGMyhEaO_5blN9iUDuyNQZLOwC0zlewYeHluECczF6LNIO9wZXl9Fja_LPrcyyYdTrALnasYHtsrrHwsJwXAe5Ma5SbmVIV9XDdaUY9mZxDxq6Ljdut7jCzVseJ90RE7XQwzps7anwdg6clROpvoB0qXRnR_PHvFe_J9m6lC7bzmfIveOYtUbXn2QmQZETBn_4KId_KMvjxhDXc0pMeYMp_G4B_4BCX62TqXtRZdf4cqR6J1II.nhoI.gqzaNy8McX9X0.BZKbxX1i6P2RUDRJDaD2fMavFvNSzFp_EOHiHiOXaVM.HJavO9Ughot2nLtsfb7Zn45kwQ84PftRD3QpfOEcendP_biHVy7y4C_W86e605Bqp1lyj1dDEcm.zKEIOfVVJbfigVjlm6hcs9jL0iwf6QLFWAPQjDlt9RoDhGJzw0Y56oGpsplqoU3L5nwdUcnu9ikRdJfxe7uaBJeDBQB_zKKoSL.kPQf121nSxBzi.0tNhw.xsJuGws2h9GX8pRiwmOqz0kvIde_Wfr6jprqTvIx2wvceNIC9pkGyWDLRHubD6JOosyc7uVFs2IBBivlIJlg",mdrd: "SxzmBe1fq4lnxouSTQceG4poojs8o0GIyaYXgCqvFzI-1734432670-1.2.1.1-0HN.05UpUvaap7XH1ixnM34fIIatNVrB8iEndVgcc1eFt624bUHuqCS39Tf2FYFvl.JKItgRcn4bfmYDJ2v7_osueaDD6rGp1ecoygK7wiPHiXs3bnN6fvjzURh_G7hV40E05nQ5X9mDu56zWqrKsAI0d1Bmb9Imd65u4jjPg1dHW1QrhNv0qJBekSoPPX9tjooqzYUsVv0kLPH6nRUusrxAXa.x3p6tK5EUKsutcCrMhXXcLSXAu7kwIa2yzjIhFCCILv1mRtsxxG338rpFLaYUetqM7CgBfgOucEgqfP7htqb5QCAX3q7fmv4_KhE_z6PSMA6wPJNGe5z2lVpT1IAqSQFFTUng11bQP.UlcXpwkLVV4D2B81fAAA65QRsKOytSp6lMJ6v5q3H7Z0XXNgHyjLxeeASuo8WX_PlmnQb48r8HdSJ3m_EMrwL_JxZK3gMA4JbywPwC3pzB7N4lY00i.K033pokvgBdz4amGgyiV1ns8fr5rPGSFCPMMX9a4CuHQjIORAAbi.8gAWb0FVXFTL9lpmtLurQ94PhDrhqtXpdxLDXWof1JU0PdP8MpGuvy4Wuq1adJN0dbm62EH_B5C6bRhQaPISBlhETtJME
URL: https://gomo.to/movie/passengers... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script demonstrates moderate-risk behaviors, including external data transmission and aggressive DOM manipulation. However, it appears to be primarily focused on providing a user interface for selecting video sources, which is a common and legitimate use case. The script does not exhibit any high-risk indicators like dynamic code execution or data exfiltration. With some contextual adjustments for the apparent purpose, the overall risk score is in the medium range." }
$("<div class='alternativer'></div>").appendTo($("body")); $(".alternativer").html('<span></span><ul><li class="select-hold" data-value="mirror1" onclick="changeSource(\'mirror1\'); return false">Mirror 1</li><li class="" data-value="mirror2" onclick="changeSource(\'mirror2\'); return false">Mirror 2</li><li class="" data-value="mirror3" onclick="changeSource(\'mirror3\'); return false">Mirror 3</li><li class="" data-value="mirror4" onclick="changeSource(\'mirror4\'); return false">Mirror 4</li><li class="" data-value="mirror5" onclick="changeSource(\'mirror5\'); return false">Mirror 5</li><li class="" data-value="mirror6" onclick="changeSource(\'mirror6\'); return false">Mirror 6</li><li class="" data-value="mirror7" onclick="changeSource(\'mirror7\'); return false">Mirror 7</li></ul>'); if($("iframe").length==0) { $(".alternativer ul").fadeIn() }else $(".alternativer").css( { right:4,top:60 }); $(".alternativer span").click(function(){ $(".alternativer ul").fadeToggle() } ); $(".vjs-tech").click(function() { $('.alternativer ul').hide(); } ); $(".vjs-poster").click(function() { $('.alternativer ul').hide(); } ); $('.alternativer ul li').click(function() { $("*").removeClass("select-hold"); $(this).addClass('select-hold') } ); function changeSource(sourceIndex){ var currentmovieHerf='https://gomo.to/movie/passengers?src='+sourceIndex; window.location.replace(currentmovieHerf); return false; }
URL: https://gomo.to/movie/passengers... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a tracking script, likely used for analytics or website statistics. It pushes data to the 'Histats' service, which is a legitimate web analytics platform. While the script uses some legacy practices like the `_Hasync` array, it does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The overall risk is low, as the script's purpose seems to be legitimate analytics and tracking." }
var _Hasync= _Hasync\|\| []; _Hasync.push(['Histats.start', '1,4329689,4,0,0,0,00010000']); _Hasync.push(['Histats.fasi', '1']); _Hasync.push(['Histats.track_hits', '']); (function() { var hs = document.createElement('script'); hs.type = 'text/javascript'; hs.async = true; hs.src = ('//s10.histats.com/js15_as.js'); (document.getElementsByTagName('head')[0] \|\| document.getElementsByTagName('body')[0]).appendChild(hs); })();
URL: https://alluc.co/watch-movies/passengers.html... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a tracking script, likely used for analytics or website statistics. It pushes data to the 'Histats' service, which is a legitimate web analytics platform. While the script uses some older practices like the `_Hasync` array, it does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The overall risk is low, as the script's purpose seems to be legitimate web analytics." }
var _Hasync= _Hasync\|\| []; _Hasync.push(['Histats.start', '1,4329645,4,0,0,0,00010000']); _Hasync.push(['Histats.fasi', '1']); _Hasync.push(['Histats.track_hits', '']); (function() { var hs = document.createElement('script'); hs.type = 'text/javascript'; hs.async = true; hs.src = ('//s10.histats.com/js15_as.js'); (document.getElementsByTagName('head')[0] \|\| document.getElementsByTagName('body')[0]).appendChild(hs); })();
URL: https://gomo.to/movie/passengers... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript code appears to be a legitimate player initialization and link handling functionality. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The code primarily focuses on managing the player interface and selecting appropriate video sources based on the provided links. While it uses some legacy practices like `XDomainRequest`, the overall behavior is consistent with typical video player functionality and does not raise significant security concerns." }
function openNew(links,mirror){ addRemoveClas(mirror); $("div").removeClass("player_area"); $('#openloadIframe').attr('src', links); } function addRemoveClas(miror){ $(".alternativer ul li").removeClass('select-hold'); $(".alternativer ul li[data-value='"+miror+"']").addClass('select-hold'); } function initializLinks(put_links){ if(put_links[0] != -1){ openNew(put_links[0].file,'mirror1'); }else if(put_links[1] != -1){ openNew(put_links[1].file,'mirror2'); }else if(put_links[2] != -1){ openNew(put_links[2].file,'mirror3'); }else if(put_links[3] != -1){ openNew(put_links[3].file,'mirror4'); }else if(put_links[4] != -1){ openNew(put_links[4].file,'mirror5'); }else if(put_links[5] != -1){ openNew(put_links[5].file,'mirror6'); }else if(put_links[6] != -1){ openNew(put_links[6].file,'mirror7'); }else{ alert("no source available. please try after sometime!!"); } } function initializePlayer(links){ var put_links= []; var opn = false; var mirros = []; var cn = 0; var links = jQuery.parseJSON(links); if(links.length!=0){ for (i = 0; i < links.length; ++i) { var getLinks = links[i]; if (getLinks.trim()) { //console.log(getLinks); if (/onlystream.tv/i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='onlystream'; singleSrc.type='mp4'; }else if (/\/vid1\//i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='vid1'; singleSrc.type='hls'; singleSrc.default=false; }else if (/\/vid\//i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='vid'; singleSrc.type='mp4'; }else if (/\/dood\//i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='dood'; singleSrc.type='mp4'; }else if (/\/gomoplayer\//i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='vid'; singleSrc.type='mp4'; }else if (/vcstream/i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='vcstream'; singleSrc.type='mp4'; }else if (/mightyupload/i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='mightyupload'; singleSrc.type='mp4'; }else if (/upstream/i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='upstream'; singleSrc.type='mp4'; }else if (/videoko/i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='videoko'; singleSrc.type='mp4'; }else if (/hqq./i.test(getLinks)) { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='hqqtv'; singleSrc.type='mp4'; }else { var singleSrc={}; singleSrc.file=links[i]; singleSrc.label='gl'; singleSrc.type='mp4'; } if(singleSrc == -1){ mirros[i+1] = -1; put_links[cn] = -1; cn++; }else{ put_links.push(singleSrc); mirros[i+1] = cn; cn++; } }else{ mirros[i+1] = -1; put_links[cn] = -1; cn++; } } } if(opn){ openNew(opn,'mirror1'); }else{ initializLinks(put_links); } } $(document).ready(function(){ $('.custom_loading_sign').hide(); //$
URL: https://www.gstatic.com/cv/js/sender/v1/cast_sende... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads the Google Cast SDK for Chrome. It checks the user agent, Chrome version, and other contextual factors to determine the appropriate script URLs to load. While it uses some dynamic code execution techniques like `eval()` and the `Function` constructor, these are likely for legitimate purposes related to the Cast SDK integration. The script does not exhibit any clear signs of malicious intent or data exfiltration, and the use of trusted domains like `www.gstatic.com` suggests this is a benign script. Overall, the risk score is low, with some minor concerns around the use of dynamic code execution." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d]; return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="AssertionError";var w=function(a,b){throw new v("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var x;var A=function(a,b){this.g=b===z?a:""};A.prototype.toString=function(){return this.g+""};var z={};var B=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},C=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},D=function(){return"function"==typeof window.__onGCastApiAvailable?window.__onGCastApiAvailable:null},F=function(a){a.length?E(a.shift(),function(){F(a)}):G()},H=function(a){return"chrome-extension://"+a+"/cast_sender.js"},E=function(a,b,e){var c=document.createElement("script"); c.onerror=b;e&&(c.onload=e);if(void 0===x)if(b=null,(e=m.trustedTypes)&&e.createPolicy){try{b=e.createPolicy("goog#html",{createHTML:t,createScript:t,createScriptURL:t})}catch(y){m.console&&m.console.error(y.message)}x=b}else x=b;a=(b=x)?b.createScriptURL(a):a;a=new A(a,z);a:{try{var g=c&&c.ownerDocument,k=g&&(g.defaultView\|\|g.parentWindow);k=k\|\|m;if(k.Element&&k.Location){var f=k;break a}}catch(y){}f=null}if(f&&"undefined"!=typeof f.HTMLScriptElement&&(!c\|\|!(c instanceof f.HTMLScriptElement)&&(c instanceof f.Location\|\|c instanceof f.Element))){f=typeof c;if("object"==f&&null!=c\|\|"function"==f)try{var d=c.constructor.displayName\|\|c.constructor.name\|\|Object.prototype.toString.call(c)}catch(y){d="<object could not be stringified>"}else d=void 0===c?"undefined":null===c?"null":typeof c;w("Argument is not a %s (or a non-Element, non-Location mock); got: %s","HTMLScriptElement",d)}a instanceof A&&a.constructor===A?d=a.g:(d=typeof a,w("expected object of type TrustedResourceUrl, got '"+a+"' of type "+("object"!= d?d:a?Array.isArray(a)?"array":d:"null")),d="type_error:TrustedResourceUrl");c.src=d;(d=c.ownerDocument&&c.ownerDocument.defaultView)&&d!=m?d=q(d.document):(null===p&&(p=q(m.document)),d=p);d&&c.setAttribute("nonce",d);(document.head\|\|document.documentElement).appendChild(c)},I=function(){var a=B(),b=[];if(1<a){var e=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+e+"/cast_sender.js")}return b},G=function(){var a=D();a&&a(!1,"No cast extension found")}, K=function(){if(J){var a=2,b=D(),e=function(){a--;0==a&&b&&b(!0)};window.__onGCastApiAvailable=e;E("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",G,e)}},J=C("loadCastFramework")\|\|C("loadCastApplicationFramework"),L=["pkedcjkdefgpdelpbcmbmeomcjbeemfm","enhhojjnijigcajfphajepfemndkmdlo"];if(0<=window.navigator.userAgent.indexOf("Android")&&0<=window.navigator.userAgent.indexOf("Chrome/")&&window.navigator.presentation){if(60<=B()){K();var M=I();M.push("//www.gstatic.com/eureka/clank/cast_sender.js");F(M)}}else if(!window.chrome\|\|!window.navigator.presentation\|\|0<=window.navigator.userAgent.indexOf("Edge"))G();else if(89<=B()){K();var N=I(),O=N.push,P=O.apply,h=L.map(H),Q;if(h instanceof Array)Q=h;e
URL: https://www.gstatic.com/cast/sdk/libs/sender/1.0/c... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a utility library with no obvious malicious intent. It includes common functionality like logging, error handling, and string manipulation, which are typical in legitimate web applications. While the code uses some older APIs like `XDomainRequest`, these are not inherently malicious and the overall behavior is consistent with a benign utility library. There are no high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The code seems to be part of the Closure Library, which is a well-known and trusted open-source project. Overall, this script poses a low risk and is likely a legitimate utility." }
// Copyright Google Inc. All Rights Reserved. (function() { /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments); Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b},m=function(a,b){function c(){}c.prototype= b.prototype;a.jc=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.hc=function(d,e,f){for(var g=Array(arguments.length-2),p=2;p<arguments.length;p++)g[p-2]=arguments[p];return b.prototype[e].apply(d,g)}},n=function(a){return a};function r(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,r);else{const c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)}m(r,Error);r.prototype.name="CustomError";function t(a,b){a=a.split("%s");let c="";const d=a.length-1;for(let e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");r.call(this,c+a[d])}m(t,r);t.prototype.name="AssertionError";var u=function(a,b){throw new t("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var v=class{constructor(a,b){this.name=a;this.value=b}toString(){return this.name}},w=new v("OFF",Infinity),x=new v("SEVERE",1E3),y=new v("WARNING",900),z=new v("CONFIG",700),A=[w,new v("SHOUT",1200),x,y,new v("INFO",800),z,new v("FINE",500),new v("FINER",400),new v("FINEST",300),new v("ALL",0)],B=null,fa=class{constructor(){this.ca=0;this.clear()}clear(){this.La=Array(this.ca);this.Na=-1;this.Sa=!1}},ha,ia=class{constructor(a,b,c){this.ea=void 0;this.reset(a\|\|w,b,c,void 0,void 0)}reset(a,b,c,d){this.hb= d\|\|Date.now();this.Ta=a;this.Jb=b;this.Ua=c;this.ea=void 0}getMessage(){return this.Jb}},ja=function(a){if(a.level)return a.level;if(a.parent)return ja(a.parent);u("Root logger has no level set.");return w},ka=class{constructor(a,b=null){this.level=null;this.Qa=[];this.parent=b\|\|null;this.children=[];this.V={T:()=>a}}publish(a){let b=this;for(;b;)b.Qa.forEach(c=>{c(a)}),b=b.parent}},C=function(a,b){var c=a.entries[b];if(c)return c;c=C(a,b.slice(0,Math.max(b.lastIndexOf("."),0)));const d=new ka(b, c);a.entries[b]=d;c.children.push(d);return d},la=class{constructor(){this.entries={};const a=new ka("");a.level=z;this.entries[""]=a}},ma,D=function(){ma\|\|(ma=new la);return ma},E=function(a,b,c,d){var e;if(e=a)if(e=a&&b){e=b.value;var f=a?ja(C(D(),a.T())):w;e=e>=f.value}if(e){b=b\|\|w;e=C(D(),a.T());"function"===typeof c&&(c=c());ha\|\|(ha=new fa);f=ha;a=a.T();if(0<f.ca){var g=(f.Na+1)%f.ca;f.Na=g;f.Sa?(f=f.La[g],f.reset(b,c,a),a=f):(f.Sa=g==f.ca-1,a=f.La[g]=new ia(b,c,a))}else a=new ia(b,c,a);a.ea= d;e.publish(a)}};var F=function(){this.Za=Date.now()},na=null;F.prototype.set=function(a){this.Za=a};F.prototype.reset=function(){this.set(Date.now())};F.prototype.get=function(){return this.Za};var oa;var pa=/&/g,qa=/</g,ra=/>/g,sa=/"/g,ta=/'/g,ua=/\x00/g,va=/[\x00&<>"']/;function G(){var a=h.navigator;return a&&(a=a.userAgent)?a:""};const wa={}; var xa=function(a){if(a instanceof I&&a.constructor===I)return a.Fa;u(`expected object of type SafeHtml, got '${a}' of type `+aa(a));return"type_error:SafeHtml"},za=function(a){a instanceof I\|\|(a="object"==typeof a&&a.Eb?a.Cb():String(a),va.test(a)&&(-1!
URL: https://gomo.to/dsPlayer/dropzone.js... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is part of the Dropzone.js library, which is a well-known and widely used library for handling file uploads. The code primarily defines an event emitter pattern and does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects. There are no interactions with external domains or obfuscated code present. The snippet appears to be benign and is consistent with typical library functionality." }
/* * * More info at [www.dropzonejs.com](http://www.dropzonejs.com) * * Copyright (c) 2012, Matias Meno * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in * all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN * THE SOFTWARE. * / (function() { var Dropzone, Emitter, camelize, contentLoaded, detectVerticalSquash, drawImageIOSFix, noop, without, __slice = [].slice, __hasProp = {}.hasOwnProperty, __extends = function(child, parent) { for (var key in parent) { if (__hasProp.call(parent, key)) child[key] = parent[key]; } function ctor() { this.constructor = child; } ctor.prototype = parent.prototype; child.prototype = new ctor(); child.__super__ = parent.prototype; return child; }; noop = function() {}; Emitter = (function() { function Emitter() {} Emitter.prototype.addEventListener = Emitter.prototype.on; Emitter.prototype.on = function(event, fn) { this._callbacks = this._callbacks \|\| {}; if (!this._callbacks[event]) { this._callbacks[event] = []; } this._callbacks[event].push(fn); return this; }; Emitter.prototype.emit = function() { var args, callback, callbacks, event, _i, _len; event = arguments[0], args = 2 <= arguments.length ? __slice.call(arguments, 1) : []; this._callbacks = this._callbacks \|\| {}; callbacks = this._callbacks[event]; if (callbacks) { for (_i = 0, _len = callbacks.length; _i < _len; _i++) { callback = callbacks[_i]; callback.apply(this, args); } } return this; }; Emitter.prototype.removeListener = Emitter.prototype.off; Emitter.prototype.removeAllListeners = Emitter.prototype.off; Emitter.prototype.removeEventListener = Emitter.prototype.off; Emitter.prototype.off = function(event, fn) { var callback, callbacks, i, _i, _len; if (!this._callbacks \|\| arguments.length === 0) { this._callbacks = {}; return this; } callbacks = this._callbacks[event]; if (!callbacks) { return this; } if (arguments.length === 1) { delete this._callbacks[event]; return this; } for (i = _i = 0, _len = callbacks.length; _i < _len; i = ++_i) { callback = callbacks[i]; if (callback === fn) { callbacks.splice(i, 1); break; } } return this; }; return Emitter; })(); Dropzone = (function(_super) { var extend, resolveOption; __extends(Dropzone, _super); Dropzone.prototype.Emitter = Emitter; / This is a list of all available events you can register on a dropzone object. You can register an event handler like this: dropzone.on("dragEnter", function() { }); */ Dropzone.prototype.events = ["drop", "dragstart", "dragend", "dragenter", "dragover", "dragleave", "addedfile", "addedfiles", "removedfile", "thumbnail", "error", "errormultiple", "processing", "processingmultiple", "uploadprogress", "totaluploadprog
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verifying you are human. This may take a few seconds.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": true }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verify you are human by completing the action below.", "prominent_button_name": "Verify you are human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "Click here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": [ "unknown" ] }
	{ "brands": [ "unknown" ] }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_security_alerts": false }

URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://alluc.co/watch-movies/passengers.html Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'alluc.co' does not clearly indicate a well-known or known brand.", "The brand 'u' is not identifiable as a known or well-known brand.", "The domain 'alluc.co' does not match any known legitimate domain associated with a recognizable brand.", "The URL uses a '.co' domain extension, which is often used for legitimate purposes but can also be used in phishing attempts.", "There is no clear brand association with the URL, making it difficult to verify its legitimacy." ], "riskscore": 7}
URL: alluc.co Brands: u Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 09:51:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9823153139614162
Encrypted:	false
SSDEEP:	48:8DduTKeMcHJidAKZdA1FehwiZUklqeh2y+3:8knM+Zy
MD5:	5500E85FCA498734E2F02154D88E52B9
SHA1:	2EBAFBE9F4282D24DB1DB7CBBDB2B44F5BAC9760
SHA-256:	BE19F9727F173C50C0EC466B965CEDB352CCA8682FBCBBA28F0B2C8FA5806238
SHA-512:	0B6BF61C7F1E614B29D422CD03059C6489C5658B7D0A67704A406321D77302184A989A04FF34BC53B6A82A63B31B13616501079651A13A8A9396B973F95EF6BE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........qP..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YdV...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 09:51:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996041952725541
Encrypted:	false
SSDEEP:	48:8aduTKeMcHJidAKZdA1seh/iZUkAQkqehJy+2:8rnM49Q0y
MD5:	52A64F43B563EABCA4887687E8E91CFD
SHA1:	8A388ED91E7C5D13DF0424F1408A00986B5DE801
SHA-256:	63D1D0F07C320AB999FDCE30AE1A7CA8C5C9B3CDB9560D4A606BD5504F21244D
SHA-512:	614167AD10EFE169A4AA40C537AC5DB61F8CF8BB4722629D96C448CB5B1186DA21F6407F75BE8135B4D47A015F4BBC1CE78669C55C192E9C26721F70DDBEFC08
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x+..qP..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YdV...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008006047875669
Encrypted:	false
SSDEEP:	48:8dduTKeAHJidAKZdA14meh7sFiZUkmgqeh7sny+BX:8enInVy
MD5:	71D39BA4663E770982F883D073429184
SHA1:	EFB706952BEE7D08A294328C3DEC5A6A874EFFFF
SHA-256:	3C2B46AA1EE5DF80F63347EB318124943D6E35B3DC52B9671C3BF52F94CC7A84
SHA-512:	B73F47B52A491113862D826303E0BE33EE2FC4D72DFB977DBA82B0921E475568507EE3D7E5618E6A6DDE2FB4FFB349135F2B29663E0E7DBF5EDF94F97C2B5B54
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 09:51:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9960254570828333
Encrypted:	false
SSDEEP:	48:8DduTKeMcHJidAKZdA1TehDiZUkwqeh9y+R:8knMzvy
MD5:	856B6D87137BF6BEADC8DC91DB624A83
SHA1:	5BB70A99F176C9A617C44E9BE5CB4645776FAEEA
SHA-256:	49DD7AB4ECBE4CB5AFD929723C0D90C4FF6C7890C19840B1F08B45E1919DC561
SHA-512:	39E17A3273A838198CEE0BC1CBC4F31CD38219BDAD0F99D349747F008FB2ED1BCAA80B345BFC729B6F041A8C1FD8D755CB61B688027B34FA3C9DB9650BD38553
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....8..qP..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YdV...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 09:51:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985808425168427
Encrypted:	false
SSDEEP:	48:8cduTKeMcHJidAKZdA1dehBiZUk1W1qehjy+C:81nMD9Dy
MD5:	D2ECAFC57B96AA4693C362C2674F45AE
SHA1:	F9E090E8E55D1C117FDD323A31FA383A7A45B314
SHA-256:	59B3C01F6798CF322CD6A0F7F20DFE83837F8B53AFEE46A6D235A7D7807220A9
SHA-512:	80B8212ED3A335F65AF1212CBBC570E2B34220AF2A878EEA09845B886E33B4310CBB36C2314D155223D4F7F0C8F78A0364DC7005A2E61F175A7EF69C494B673B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....(...qP..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YdV...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 09:51:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9934148509806615
Encrypted:	false
SSDEEP:	48:8XwnduTKeMcHJidAKZdA1duTeehOuTbbiZUk5OjqehOuTbVy+yT+:8fnMHTfTbxWOvTbVy7T
MD5:	26FF641442EA6CCBED6A99DA8A39650D
SHA1:	79F241222DFFF2A0AE6EF6DA3D008C4D1DC7CDA8
SHA-256:	E4E0CC57AF775CEF0238A464493A76704991785C44FE8F3C9A6ADD47E0F5A693
SHA-512:	D541FE944AF8D3403D4E79F78CCD99DE89E82F00777245A0CC0EC1847E4AEBD47C2B2E9F14F996ABEA103AFE0953FBC345630AE6D53BDD7B3636C4CC383DA275
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....&..qP..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.YYV....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YcV....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YcV....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YcV..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YdV...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	10129
Entropy (8bit):	7.950604495388207
Encrypted:	false
SSDEEP:	192:qEOVkA1/QFX/GfIJExaTL85FUUPWjBIDCv2Tpe9x/lXNQz1euYCDHAWJlZ5r:qEOJ/aef+EkTLA7PWjBDv7nXCiCDHACz
MD5:	66B3544380AF466CC5977139F4DD9589
SHA1:	0A6BBB41B6A6A77925FDA3003CC5BBD362B7E35C
SHA-256:	34A17521384BE4649E8BC1C5B4D623E50CEBA210DBEF8213470F3FFB92E9FF44
SHA-512:	68C9AD555B2C252B3B652E6C955A36FDD15F1112A1BD5BC4FACA9821E4D27F896AC5AD09373BF379DB239FF29E342A45E5EF8933D3BD50BAD1308E4AEAE6F676
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/1231337707-poster-Tache.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........J...."..........4..................................................................@.@.@.@.@.@.@.@.@.@.@.@.@.@..j.z.:V.VN-.lX.0..[..^Y,-.cm.m..g..ao..,....n..es..L.;. .\.\|..C.q.z..7Z.......L#..+.pi.^.....f..3.[...M\....@'.L.B.s...fn./...]..=.....t.<9Pm?_..r.m'...-.]s.-w.....C9}..)r&..3.L.5.\|u...e.......d:....\|7..7..g...hf...BR..+.y?....3..<v.........3]=....U.s.s..y...U..7Q..<...Smo.?#UE...`_..>...V......UU...3..i.....wD.t...b.....6...r.\...G......Q..7..+......i.L.... .L....]....P.M.("[..~o..s..Jz...>..*..!...qoeBoh..v..c&...5{#...C.....O.m....w..2y.z.StI^.m.Y......j$..-76J....j.W.Qx.pmQ....~....c...I....F.aa.Q.Y4<sX.....5l..}..F=u.V:.w7.../R.o7V[.xy.,....xA..L.V.x.R.....=.-.N........S..tiwaJ........9[...}u....M1>...:..22m6..X..I.NzW..u...9.....L.V.+...r...F..6.....f.f..q.T.O..=.P...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26862
Category:	dropped
Size (bytes):	9846
Entropy (8bit):	7.975917429874461
Encrypted:	false
SSDEEP:	192:1KGsNvJ1f/tw1U06ufU79D6qxIx11rOjY0Tn+Gk7ggowbY4C2L90ahbT:1KfvHd74sZDf6rAY0MgFkYmPhH
MD5:	DE7338648337C4BA1F400D65E7F8CFBE
SHA1:	CF27343003FAC16577674AF699A790BDACA61BE0
SHA-256:	E1F07AA2E83910A836B903306844F9FBE7C0576038E6AEDAFBE7CC20CB0CEAA3
SHA-512:	6EEE03B2A68D3E25FB7C01870986D2D42B812DDCE6C87FC6FD690609E0160AED8E23D55E99925F8C2966460D869625191C68FBD2037F615427E72E73652965A8
Malicious:	false
Reputation:	low
Preview:	...........}_..8..}...u.Z.q.C..Y.....m....G!n...J...k.}F..'...9.{..{...F...h4.=.c_V...v"....3b....<.7....U}.U....w...Oc,.@......0.S.F..g.....[....tn.}k0...n....o...Gr.-.y2.i...'.Hk?.wU..O..}.M.n..I.c.<...uz...Uy..u.I.....O..Ie.T...u..U.>.n......g...y.E..'.?q......4.\|....Oo.[..nUR$.8..f.....Ar.e............}ks.2.\QUk.O.wo.}+jm...Z....}k.......4.j.i.I+j.UD\|...K6....q\|...`2.y.9.x.)v..@...&(....($h.S.,....q.Rk.<.8.m.....w'..D.'r..X.S..O..w.o.[.u.y ..9.?.+o.}::>?y...t..2h....T.t..I5..... O.Z. ..".......A.".^>...@..Bn...?..^.1....p.w...N..u.....rr.'.<qq..).\/.......T/...N....w....{;lw.Q..p".^V.O.7`.4......n....Y.V...L...x&S$.{.6..:.>..$.....'.1..Kf...e.=...~...n........C9.y..6..lJ.j..f<.yuWi&....4+.=...m6~=j.O.......>.....vm._OK......'+............M.3....r...^...71..........p..>>\|....u\|..3.....\|>Z..;...sm.[o.....u...O..s.:..Ppzq..K....c.....9..smC...3 ..Ro..; ...x.i...w..{(...9.2..;..n}...Z.....j......t5A.p<.{.....#.>...$?

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (592)
Category:	dropped
Size (bytes):	25773
Entropy (8bit):	4.3046758847958975
Encrypted:	false
SSDEEP:	768:zO0gzsKGMuEkiNvn5CNawlR5I0Y5//u7CFG:RNsguPuH
MD5:	9C4596300AF246D887439DCF0FE9B453
SHA1:	B4653E067B2A50F8CDEF1261666113F433A01C21
SHA-256:	E5159CA120B8E16EC544B29D9D32A2A7791D82D5F05C3D8729763EEBE6192791
SHA-512:	7FABDCFDA04F8E32AF556F17071779E61325E55F163B6BB3E3A7E55133A4A7111775319C28152FD33F15DE91F2CAA55F5C08AB78DCC28BDF6DE3C76C01DE85D2
Malicious:	false
Reputation:	low
Preview:	/! @name @brightcove/videojs-social @version 3.12.0 @license UNLICENSED / ! function(e, t) {. "object" == typeof exports && "undefined" != typeof module ? module.exports = t(require("video.js"), require("global/document"), require("global/window")) : "function" == typeof define && define.amd ? define(["video.js", "global/document", "global/window"], t) : e.videojsSocial = t(e.videojs, e.document, e.window).}(this, function(e, t, n) {. "use strict";. e = e && e.hasOwnProperty("default") ? e.default : e, t = t && t.hasOwnProperty("default") ? t.default : t, n = n && n.hasOwnProperty("default") ? n.default : n;. var o = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(e) {. return typeof e. } : function(e) {. return e && "function" == typeof Symbol && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e. },. r = function(e, t) {. return "function" == typeof e.usingPlugin ? e

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=ADB&partner_device_id=23541675871998615043844100288184115988&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 43, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl5Utt9Lxl/k4E08up:6v/lhPQtth7Tp
MD5:	F8E6C34624EE66C1297B83F698919054
SHA1:	0BC6FA5A3A4306A506F3E9BA2B46B4D02CAEC0BF
SHA-256:	7C641440A175B40FDFD188E4C383EB9A5298E0A8E42E8D7A3D5142E33304BE3A
SHA-512:	BBDCD9BFE791829A0B56C6A55EA91178FF9E1A1E638679B1073273AEF4B82FD44E0E049E9990EAD3F23310A2160E481BB70543804F5813151DFD21E9AABC6987
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f365b70ac0041af/1734432682625/MGqtdmfqwZAmaAR
Preview:	.PNG........IHDR...4...+.......<.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
URL:	https://cdn.tynt.com/afwu.js
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32108)
Category:	downloaded
Size (bytes):	40316
Entropy (8bit):	5.425410066508974
Encrypted:	false
SSDEEP:	768:nAGHCQl8dA0b2ncUOxW7gnBQR50qjJRHR18JCuK:nAGHiancUOxWOuDjL
MD5:	5D91DCEC9E182AEAB8EF9FA206076EF0
SHA1:	E847FFBBCB75ED2FE2BE3A370C8B3E9A7E97B8E7
SHA-256:	EA06D57E45FEC125C8CBF8C2580D7EB3E8DC92FF9726BEC3621321E099728660
SHA-512:	C44B30E84AA188F2EF3A7010CDACE03DF84437A688CD62F68655594F279BA1E6F06B86CC963FA237A232E10805A243B88D83355115BE66AEBF16708FD71C90C5
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/jquery.mCustomScrollbar.concat.min.js
Preview:	/* == jquery mousewheel plugin == Version: 3.1.12, License: MIT License (MIT) /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor":"ceil"](j/f),l=Math[l>=1?"floor":"ceil"](l/f),m=Math[m>=1?"floor":"ceil"](m/f),

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3993)
Category:	downloaded
Size (bytes):	4105
Entropy (8bit):	5.16702871187809
Encrypted:	false
SSDEEP:	96:HPPSKq1jsmarHXEeTiuTCOJl+ejbdLu7SSO6wuffX3iV:HTuTsHD/1dsSfk3X3K
MD5:	73859074997BF9500CF463A04D083504
SHA1:	AF7CC9E2A51F25EFC47651A9364B45D6FDADF9CA
SHA-256:	D13C9570755AD2DDF9E26FF48D9C3C9209C93112A7F5D67FBC85BB668386AB4E
SHA-512:	47D8825BB59732D41569B0756EBA35D3158707B61CD814A6EF8290CFD7AF1D3D98C758522C7022CF524729E3901D8FA51BD22422C3056BFBC31FA1B600E14320
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/videojs-mobile-ui@0.4.1/dist/videojs-mobile-ui.min.js
Preview:	/*. videojs-mobile-ui. * @version 0.4.1. * @copyright 2018 mister-ben <git@misterben.me>. * @license MIT. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t(require("video.js"),require("global/window")):"function"==typeof define&&define.amd?define(["video.js","global/window"],t):e.videojsMobileUi=t(e.videojs,e.window)}(this,function(e,t){"use strict";e=e&&e.hasOwnProperty("default")?e.default:e,t=t&&t.hasOwnProperty("default")?t.default:t;var n=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},o=function(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t},i=e.getComponent("Component"),r=e.dom\|\|e,a=function(e){function i(t,r){n(this,i);var a=o(this,e.call(this,t,r));return a.seekSeconds=r.seekSeconds,a.tapTimeout=r.tapTimeout,a.addChild("playToggle",{}),t.on(["playing","userinactive"],function(e){a.removeC

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 52, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13037
Entropy (8bit):	7.968471842826269
Encrypted:	false
SSDEEP:	384:lrS4wttPQHCW9uq7KbdA8upVUO04WsLqS5mbQBmurv:JsDPQHC8LKbdsyOvWsLXmbcmurv
MD5:	A4D8E64E42CF5AC2A95119FDBFBDC32C
SHA1:	0107E94C235847D2E2F6CE60A3AD784B827AF691
SHA-256:	FDE08EB7248BAFF73399AABE228C4F824A2FD1C445E9EDA545DB6A35CA81E858
SHA-512:	E453191FF47CB2AC04A4156A6A57E8A80F39D8303DA2CA17F9A21BF08DF8581292A79782C165071DD64B1374233547E6E3B0C1D3D477D880879B8ACC4F6AF41F
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/logo-light.png
Preview:	.PNG........IHDR...d...4.....,.A.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.....",.Ty...1.IDATx..w`....?.s.I.$......z.E... .....Q).)M......R.H...!.-........ z...{........'.~..<...\|w....'..!..eZ.:......ssp...'..\|7...'..Kp.V..C...p..#.y...2.r........<..N0.H6-(.r.g....ui6....(...W.1.w.."..._...W./#[n?W..?...\..........# ..l....s...b..C2.....J....+....^....<..]..o...F.+......dfo..}.v'[A. "._..y..B..eT...e..8.....0........B?.......t.:w\......Z.hW...d.>x........L.+.<.'...Q.T.D=q.L\|H.f.b....U..7......9.T.@..e..n[...o.n,6Q..z<.b.Pu..?..-.+..<.....KO..S.$.0R..k.)g%..[.....E.b...........NXo...v.nc.Q[.>.lz.%.l...V...Z.J).;..<.)..#....k....n..[.}b\.....}...........lj7".w.f..z..X{.g.6....x..b..y.?!...U..0....].r.z%,".l.k...zm.$1).......z..j..eo.II,.^.t5g......y.....@@i.q{....7.V...Z..........R..h.GtI.....:'....HUk..G].3....y....)....M....\|.{.......}.=c..6.Ef-c.#.>{.....G..s..j_.8a..*]{....9/.?.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 128
Category:	dropped
Size (bytes):	26567
Entropy (8bit):	7.877106772849995
Encrypted:	false
SSDEEP:	768:TBMipoAaGLSTx3UblXvH9OR/pdHc/kVP4lse:ii2ec3glX/9Qfglse
MD5:	D4C2FEBA2298A4D376FEA49E62C9429B
SHA1:	2C0F1BB47C3E2916822153770D190473211FE8CD
SHA-256:	57D6555A2586CCF39F833F8B6C9A7059C3112C64A4EC294F1A9BA8A5AFCE0A5C
SHA-512:	6C717FAA69DD0B652C3D131670E8CE9D51C9CAEA35CE97900429D6D04DA910EAE9F637F9EAC0CA3F744C38BE7699F128BD68D1FA061F0CADA5F8A555A69F1F7A
Malicious:	false
Reputation:	low
Preview:	GIF89a.......L..Q..\..n..U..}..Y..o..p..]....._##............u".d-,.#!.'&....!"i23.'(r43.+."!l:9.(,u=>.21.,..()oCC.)$.?@.::.>;.'-.?A.44.89.00{HGuJK./2.?@.CC.,0.LM.9<.LJ~RR.BBzTR.45.RP.JJ.GJ.@B.22.NL.28.II.VW.XX.ML.UU.FE.TW}[^.9=.:7.OL.^\.PR.?B.bc.^^.``.FG.LK.IK.__.LO.hj.NK.RQ.cb.hf.gg.YX.bb.ml.TQ.TW.WV.^_.gh.ih.pr.[[.mo.ee.ut.rp.kj.ab.ca.mm.uw.yv.km.eh.rr.uu.kh.{z.mo.{y..}.sr.po....y{.xv.~..{{....uv.}\|.zy.......}~...........~.................................................................................{~....gg`..}53.26.YY.be.:;.......;@.uu.:;.EB.12.\Z.mms....../0.FF.FE...w./.pp.?A.^^.ECS...PP....UT.PP........................................................................................................................................................................!..NETSCAPE2.0.....!..Created with GIMP.!.......,............k..H......\....#J.H....3j.... C..I...(S.\...0c.I...R8s..i...@..l...'Bo..Yj...B....ZR....h..Uk..Q.R.(....].v...X.e....M..u~..E.#.r..K.@....H...

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6002), with no line terminators
Category:	downloaded
Size (bytes):	6002
Entropy (8bit):	5.115235145665093
Encrypted:	false
SSDEEP:	96:Hgto0wNkRPNwbvRfAIAMVl+YihD1izovA3HEmitlavl16BHfHcaqfPQX+PZvazGX:AtpPNwbJfAccxh8MvA3HEvtkvl16BHf0
MD5:	4F5ACE46A010494700732353AD1FC7DF
SHA1:	B1C3BFFFFD916310A5CE69BC561E4B8D8C240D00
SHA-256:	6678A28F54A3C29335A6E6F84F0ED65A69CB865B6692DFEC727179EC696696DF
SHA-512:	9766F645E01BFC4804F871B29121BC7DF3F6603E6F9CC071D4986DB7251ADBB1ED5F48007DEC0A11CBFB27661A3A9E6E132C8ACA6C7F876430381137C85F05A8
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/movies.min.js?v=1.6
Preview:	function loadNotify(){0==$("#list-notify .notify-item").length&&$.ajax({url:base_url+"ajax/user_load_notify",type:"GET",dataType:"json",success:function(e){1==e.status&&($("#notify-loading").remove(),$("#list-notify").html(e.html),e.notify_unread>0?$(".feed-number").text(e.notify_unread):$(".feed-number").text(""))}})}function ajaxContentBox(e){$("div#"+e+" #content-box").is(":empty")&&$.ajax({url:base_url+"ajax/get_content_box/"+e,type:"GET",dataType:"json",success:function(e){switch(e.type){case"topview-today":$("#topview-today #content-box").html(e.content);break;case"top-favorite":$("#top-favorite #content-box").html(e.content);break;case"top-rating":$("#top-rating #content-box").html(e.content);break;case"top-imdb":$("#top-imdb #content-box").html(e.content)}}})}function updateMovieView(e){$.cookie("view-"+e)\|\|$.ajax({url:base_url+"ajax/movie_update_view",type:"POST",dataType:"json",data:{id:e},success:function(){var s=new Date,o=2;s.setTime(s.getTime()+60o1e3),$.cookie("view-"+

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	dropped
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2444
Entropy (8bit):	4.6758452171921325
Encrypted:	false
SSDEEP:	48:Guui4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:qi4KtlTla/szp6yqaIvzLx
MD5:	011B458C5D07F2B7F2159B09EFAF3517
SHA1:	CB98FC77F51303C113F4D0B08EE1BE7D27512CA4
SHA-256:	B05C845B2B8C09866E3D1EB91C5828D8DBB8BDB483E2ABE5D315C8185239E7DA
SHA-512:	DF5DD20459D2A119F80295A99ED339C76135801134A579B6C3DF1B5C6F609C2A8EA3355337DB268A71317AFE053A4632D6B5748883FCED4A25C64C7FBEBAD745
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZGsAAGdhV9kAAAAIPUfYAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	downloaded
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	dropped
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (653), with no line terminators
Category:	downloaded
Size (bytes):	653
Entropy (8bit):	5.4591520284351285
Encrypted:	false
SSDEEP:	12:+dQQbBNxEXpbzb5Hh5GRAbNxTEGQQ/N8YQile/iMdy0yQDO5Q8xXHR:+dvBNoDUAJlVjWYHA/pLyb5Jx
MD5:	92AE5605358EF1DF49DDEA1E161553ED
SHA1:	D0A5F8B853C12B57C48A99DDC00B0369B9C5C9A7
SHA-256:	0B9FE7DE8B2764D2690122F4377F2644D625FD6A16A77120C58C0F0E1F658B29
SHA-512:	FC699504C869AA86A07A84310F1858C99ED815A403C77EFF5602561BB20C9703A007B99CCE4D1FFFD4BB33E745A396DFFBD29D53CBB964F625E1224EB2F8FA22
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0
Preview:	(new Image()).src = "https:\/\/cm.g.doubleclick.net\/pixel?google_nid=eye&google_cm&google_sc&google_hm=Mmg1ZUJsTmR0SXlKZTFzaDZwclFuVWZlaWNCOHUxMmJ2T0dmOTd3T2lxUGs&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=51md42u";(new Image()).src = "https:\/\/match.adsrvr.org\/track\/cmf\/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/ib.adnxs.com\/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/dmp.adform.net\/serving\/cookie\/match\/?party=1009";(new Image()).src = "https:\/\/sync.srv.stackadapt.com\/sync?nid=eyeota";

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (658)
Category:	downloaded
Size (bytes):	4695
Entropy (8bit):	5.0373223007972
Encrypted:	false
SSDEEP:	96:UUhc+Ua2WtexmK9h7vNucm6VH4ig09luv0NeHw5ckIv:Dct4eP7VL9YiX9xm8c9
MD5:	C363465814ACB803ADF3B47F4A49297D
SHA1:	409315128194CFF682B8624022C5170F06ACF511
SHA-256:	CB5C39DFFEAAFF78C752E209FD4D034918499A56D75CEBB6F9084919E9BB6AF4
SHA-512:	2804F826CD47AA4C21172152A51E6D05B901E891E9D3CE4914B1421A71A402A8AC6353344AFB4BC85F24FA779B841D3C6677BE7F4964D7AE3A9EDFEE2B2F4E00
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.js?11
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){.(function (global){.'use strict';..var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor.configurable = true; if ('value' in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps); if (sta

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2010)
Category:	dropped
Size (bytes):	6974
Entropy (8bit):	5.036443580484677
Encrypted:	false
SSDEEP:	192:ppOIptlomlfQE+BdttFzwHO6geqUVSIwUlyrr:R2r1Bxjr
MD5:	B0560242A3E6BFA725F3318A6421C2A1
SHA1:	E1E3FCA8BF89A62EC023F11D1E13BCD05A523958
SHA-256:	13971A21E52963922AF2A4CE68153931184B5404DB0DCBB53233E441209AE0EE
SHA-512:	A55E1826FBCDA7138A06547E106C49C1F81BB9618DCC042B5890A665960A91A697E4F88DA024DE5E3EECCA9F9982BF38CB8CA4A577F865E46EF6DA1318A28F91
Malicious:	false
Reputation:	low
Preview:	window.mobileAndTabletCheck = function() {. var check = false;. (function(a) {. if (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino\|android\|ipad\|playbook\|silk/i.test(a) \|\| /1207\|6310\|6590\|3gso\|4thp\|50[1-6]i\|770s\|802s\|a wa\|abac\|ac(er\|oo\|s\-)\|ai(ko\|rn)\|al(av\|ca\|co)\|amoi\|an(ex\|ny\|yw)\|aptu\|ar(ch\|go)\|as(te\|us)\|attw\|au(di\|\-m\|r \|s )\|avan\|be(ck\|ll\|nq)\|bi(lb\|rd)\|bl(ac\|az)\|br(e\|v)w\|bumb\|bw\-(n\|u)\|c55\/\|capi\|ccwa\|cdm\-\|cell\|chtm\|cldc\|cmd\-\|co(mp\|nd)\|craw\|da(it\|ll\|ng)\|dbte\|dc\-s\|devi\|dica\|dmob\|do(c\|p)o\|ds(12\|\-d)\|el(49\|ai)\|em(l2\|ul)\|er(ic\|k0)\|esl8\|ez([4-7]0\|os\|wa\|ze)\|fetc\|fly(\-\|_)\|g1 u\|g560\|gene\|gf\-5\|g\-mo\|go(\.w\|od)\|gr(ad\|un)\|haie\|hcit\|hd\-(m\|p\|t)\|hei\-\|hi(pt\|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(2

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18092)
Category:	dropped
Size (bytes):	37190
Entropy (8bit):	5.323734826163063
Encrypted:	false
SSDEEP:	768:0ndwsMHDMOGtpCvFzZB2qbFH0tnklp8aInVS/dpKTs7rQGr2x:DDnDMnEpB/7r2x
MD5:	8BBFCB562A0BAA40486F0990AEF461F7
SHA1:	E3D97D6450CD3EC7C33AC2FADDC94386F429D5B1
SHA-256:	499D827248FA4D92476F7F7048B3FBBEF2B8B6D34AD60B3B88D8A051ACAB30A7
SHA-512:	94E9B35EA98ED48448A6E3808EB8A599623CB9E848ED004AE670B7E59DCB77B08E0EB21A40A31B4CB0E5DAAA0851E9EEE653943103037B93400ED37CC67BAA5E
Malicious:	false
Reputation:	low
Preview:	require=function t(e,s,i){function r(a,o){if(!s[a]){if(!e[a]){var u="function"==typeof require&&require;if(!o&&u)return u(a,!0);if(n)return n(a,!0);var l=new Error("Cannot find module '"+a+"'");throw l.code="MODULE_NOT_FOUND",l}var g=s[a]={exports:{}};e[a][0].call(g.exports,(function(t){return r(e[a][1][t]\|\|t)}),g,g.exports,t,e,s,i)}return s[a].exports}for(var n="function"==typeof require&&require,a=0;a<i.length;a++)r(i[a]);return r}({1:[function(t,e,s){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(t,e,s,i){void 0===i&&(i=s),Object.defineProperty(t,i,{enumerable:!0,get:function(){return e[s]}})}:function(t,e,s,i){void 0===i&&(i=s),t[i]=e[s]}),r=this&&this.__setModuleDefault\|\|(Object.create?function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}:function(t,e){t.default=e}),n=this&&this.__importStar\|\|function(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var s in t)"default"!==s&&Object.prototype.hasOwnProperty.call(t,s)&&i(e,t,s);retur

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3031
Entropy (8bit):	5.231556138745259
Encrypted:	false
SSDEEP:	48:t1CTDGdQzm5e9DjHnb7D4cyrcvR2nOYP28zx7CNlflvAKVnTGAWopyWIv1rDx:PaDnfHjxrpwRXy1+KtGAWjv
MD5:	B4A130E436EFDABBDE871FD4B3748D05
SHA1:	A73609F9BBED8E1F7A2470B8DD5A3B56E64CA444
SHA-256:	2495E1EF982DD9754BCBAF5939CC92C177EB6E0836576B693B4B91F45548C499
SHA-512:	6D9A226047CB426497F3DCC8428C4D09091995017AB4DA9778AA5C39D23E4A85EBB9E0053016791DD85B888BC9CA132945DC1A609295E1F03C87EE4E3B94DA21
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/base64.js
Preview:	var Base64 = {.....// private property..._keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",.....// public method for encoding...encode : function (input) {....var output = "";....var chr1, chr2, chr3, enc1, enc2, enc3, enc4;....var i = 0;......input = Base64._utf8_encode(input);......while (i < input.length) {.......chr1 = input.charCodeAt(i++);.....chr2 = input.charCodeAt(i++);.....chr3 = input.charCodeAt(i++);.......enc1 = chr1 >> 2;.....enc2 = ((chr1 & 3) << 4) \| (chr2 >> 4);.....enc3 = ((chr2 & 15) << 2) \| (chr3 >> 6);.....enc4 = chr3 & 63;.......if (isNaN(chr2)) {......enc3 = enc4 = 64;.....} else if (isNaN(chr3)) {......enc4 = 64;.....}.......output = output +.....this._keyStr.charAt(enc1) + this._keyStr.charAt(enc2) +.....this._keyStr.charAt(enc3) + this._keyStr.charAt(enc4);......}......return output;...},.....// public method for decoding...decode : function (input) {....var output = "";....var chr1, chr2, chr3;....var enc1, enc2, enc3, enc4;....var

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js?onload=fjGVd3&render=explicit
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	380
Entropy (8bit):	5.245911680799567
Encrypted:	false
SSDEEP:	6:51b91dhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bjd513QvuHnmVZkGdDJH10D+xc15C5
MD5:	80716DA8EC68018F1E72C8A3F988CEBE
SHA1:	92E5D24B78C510AE95016A3D14EED0D16EADF937
SHA-256:	3C9E4427CFB92420BC98CBC0FA9113A318EF3BA0DD0CF165C60C5CA4125168EB
SHA-512:	0E49D4535BD5121634714FD28709EAA2A90ED01AA8F696A796CAC266E474EDC794D7C3B63E539DF6E1848F3570EE84CF3507A843E89652544622C0461CC41526
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=5076";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15802), with no line terminators
Category:	dropped
Size (bytes):	15974
Entropy (8bit):	5.4661181095325375
Encrypted:	false
SSDEEP:	384:piffPH9fjOWYxfJZV9lQ0rIM6DEaYvs/gUkDNdtXdg:sleJjzIMoEaYvHdk
MD5:	59B27A075F32F5E735AD698BE77A95D2
SHA1:	07722E7CBA7F2AD63AA529D3C26554FF732A4AB4
SHA-256:	794479E471E8EDEFB742FDDFB31A70001847EA24E0E49C35B1E1D50AA8FFC144
SHA-512:	A70001ABCC9F355FBB40F4C3B850E24A6D0A813675AFFD9F3573C0A70A7550EA5FCA2ED10448E37917BD68055040FD086A2D3C6F250BD3577AF8C68928F6C842
Malicious:	false
Reputation:	low
Preview:	!function(f){"object"==typeof exports&&"undefined"!=typeof module?module.exports=f():"function"==typeof define&&define.amd?define([],f):("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).languageEncoding=f()}(function(){return function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);throw(f=new Error("Cannot find module '"+i+"'")).code="MODULE_NOT_FOUND",f}c=n[i]={exports:{}},e[i][0].call(c.exports,function(r){return o(e[i][1][r]\|\|r)},c,c.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}({1:[function(require,module,exports){const byteOrderMarks=require("../config/byteOrderMarkObject.js");module.exports=uInt8Start=>{for(const element of byteOrderMarks)if(element.regex.test(uInt8Start))return element.encoding;return null}},{"../config/byteOrderMarkObject.js":6}],2:[function(require,mo

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 41x41, components 3
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	7.1695845955029744
Encrypted:	false
SSDEEP:	24:FlhZPlJkjI4YF/ISAhY+MKRnXKEh+EQfUwFVg:z/mtYF/IbXa3bRg
MD5:	4105C4D96B2B4803425383300366AD57
SHA1:	AB93C132C134B64E180857984BA79458377BA509
SHA-256:	F187B7773965920225DAD8E4E6598DCDF8E5CAF64585CD805C70B045052E0F31
SHA-512:	7D9CBBD24DE67FFD4F856126FBA976ECD61DB1912FDF2040F267D65E84341BC40E0D2D5BB873B4211FF0DB2A1C3237AF8535EE73DE9E5B6852B68F9785B2F081
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/bg.jpg
Preview:	......JFIF.....d.d......Ducky.......T......Adobe.d.................................................................................................................................................).).............~..................................................................!..1A..Qq".....BRs..Tt....2r.3S.45U6....................!A............?....77....P......W2y..W.~.q...A..)a$..r...<....V...Vpas.W..kA..._...gC.....p.9G.<..%.XbK.D.S= pR.ac...'...FK.....O#......Y...J.p.....+.....z.-Q..:..H$.`..i.. qq....X\1.6.........M9t. .}.Qunj\|.....0_..1..p-....W.....cm...H..."zO..6.....f...u`.N.F.I..O=....X.W+.....E.\.3...R..U...}.t....4........MA.Q.Jm..#..........@...... .=..w....({....t.?^..M._..*........<..............}..GIq/....'"......%.9.c$@...Vq{.R..oP.#i!..K.F..:..o..Oqd....5...d.'...I..-.x..X....).Z.:..^n....{^..f.i.!.PyLh..<....K...6.......Q.12qm.lrj.S}Z.a.:....2{r....UFe..Cs9....4.g.2T.v].%....v.....K.2.`.......A...\%wQj....ki.McX.. .u....o.vJ.W.d.\|.h....?.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	381
Entropy (8bit):	5.256446190212252
Encrypted:	false
SSDEEP:	6:51btgdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bad513QvuHnmVZkGdDJH10D+xc15C5
MD5:	B162F9881B622D4F387888C46BF99142
SHA1:	2525755A42E9667E0EFCA4224918C1CEF5A812B0
SHA-256:	2E1768265D83AE0CC33BF2D3B23CF49957A0DE2AD8B90C8D81CAEFCB3BE20A52
SHA-512:	379CFE2795DD0FC6F0D7BD515A01F96255B5F6541EE6590DC5C9E25196B87683403D331DE594FDED63BAC2C73FE1BC83CA3B0FF2846DF59C8309168816ED4D79
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4329689&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mPassengers%20-%20PutStream&@n0&@ohttps%3A%2F%2Falluc.co%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:192497717&@b3:1734432728&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&@w
Preview:	_HST_cntval="#3Vis. today=10796";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	18267
Entropy (8bit):	7.974495297282132
Encrypted:	false
SSDEEP:	384:RBWlOahoZKUmY6B9MJnBBQ4Qw7UpXv+VrMhwDl3:zahgKpKBaiUpXOrMhwDl3
MD5:	BB03D394A0F0F51F99DCE0F68D20DF12
SHA1:	C668E78DF50F8EE6C1DBAB90D6C9C3F2E5F6F78B
SHA-256:	6B8E7CF5FC9C19FBC63FD513D7E7D31567CEA123DF4B60E2EAEF21512630D987
SHA-512:	874A3E4E121560940E54E3592B35E60B8EF016C6992162FA0BDDE9B1CE3F41265ACD1FF91AFB34E57137091B71BFC1336BF3EACEEFE897A5DA739A2529F83A72
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg
Preview:	......JFIF........................................... ...... .#...#.3($$(3;2/2;H@@HZVZvv.............................. ...... .#...#.3($$(3;2/2;H@@HZVZvv.......J...."..........5.....................................................................?KP......&...q.V..K&..tu..d...,...5>"tO...'G..L... ..W...1RQ7.NB.7.zq..H...uB.`..o.....d.\.v~...L.{T..Z)..1.<...J..}......@=..L..zgEG9..,..(...%j..nY...3Y..d.]..d3:..;v/c.R....z.b-.....1....kX=...y.....@..tp{.N.'I.r....1..jzl...>a..~^.D}..=... f.....'VQ.v..`......\|..D.Q..G..6CuN.(.<....x.....\......h..M..i.2FD......:...O+..R.+dP.;.G...p......)..J.o.o..31-}.7,...v.VsI.M6...:..a....s..G..+..<.....,.x..,_$..t.H*b..-..4D3-G?........b$"$...#..&:..'t./..,RJr..[].t?:tO...5}..`..s.5...Y.l...o.Tbt.z...?.t...}!.3Db..'..F..].:.YE!..3...:'.z..e9.........^cx....'.6.u.V.....'.,M.....y..>A...;.Gt.Fu.....tkdmV..@........%U.$j9!......,\..5?u.n....=\...A.q_SP..a..2..4..'o.F..p_......M`.sW>3J.Tk(j..).?\..L...d.j sDO^.yx...'sm..<...u.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 32523
Category:	dropped
Size (bytes):	10385
Entropy (8bit):	7.980989024743977
Encrypted:	false
SSDEEP:	192:gwERd0OvaeSh4oDkG95TfG1yfW3cSMTLjZLMoWndIb078acF7Rqcl:MOuSf3G1yfW3cSyLjsdY078rqw
MD5:	F62FE8683B217122418389B8440556E3
SHA1:	B10FDD6B68F5A334834AD733871105CA3F161485
SHA-256:	0E59FC7F61E65C48C9EB633E2152C991E9D94676B31EF652B3BABFD1A70A90AE
SHA-512:	E00CC2044122E2879357874DE805239A20C4D6F3958997BD4AADF9B61356F6A9544A72A37DBD055D9A37897D6F50214A7CCBCE1B2747B9EC324EFFD92ED957F4
Malicious:	false
Reputation:	low
Preview:	...........k_........J]..q.@(q...e..P..v..5..n...@...~~......>...?..E.F.hn..].\^.._\|..X.&/.1......}.i....Ya:.....p...rc...sxa....8......G.}...\=1M5.E..>...o...6.....Cc.5..M..s,..1.x!ar....N.}c\|.z....`l....=0...-...\..........K.......O..i....{.s06.....eo.el..Na.....{..h.../.E.$....^..........p........1...{&i.....-C.4.1``.O..Qsk..B.T..j2......)..7...k.#m_..v.#.l....!%.4W4.o...o....16.....1.`Z.o4.pj...p..ck.Ac...no.n7......n..hp.q..j..1]9.xq..T^.......[....Xa\|_i......g.....6!.J..:)UZ[...i!.Fc...;R...........qy.d...i.;.d.=9.............R0''.<h..C..V...g.-CV.@.....@..2..A......2d..@.. ....^..\L..A..o.=0..`:.{>.......E..F\........v4.i..........p...N.hp.z....V.IS.}`3.)83....4.46.....F1,..`..FC...tm...t..~?../.........G.5..... ........g....,....^.F.f...?..i.../x...7.O.I....l..U.!.-Vyo......}....l..A:D........o.9..F.\|..t.'...h<X/.~.i]..u................L......f...O....~.x...~:...!.s......MG.h.....)....b.O.h..NZ>U.?xae...........{U..p..[e..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	12447
Entropy (8bit):	5.3022108091861675
Encrypted:	false
SSDEEP:	384:mwI9+FuRAFCL0OtLkiQ7CdEvn5hG3Vag4UH:o+Fc0C4ORkiQ7CdEvn5hG3Vag4UH
MD5:	F042533FD73AA6400034A11BAEAE0295
SHA1:	577844A1B091A179857BBACE5B587FDACECD1458
SHA-256:	2C3953FAC9930DF744CED18EC6C30081958E810496945FFF1DD70AC806C94667
SHA-512:	B61CAA80A9A52482418566411741AEE1E804F158BF939F303FC030EB30914695784E5351EC0BC83609F7AAF741028AC184328EF3573B3993D506209AB2D0E0B2
Malicious:	false
Reputation:	low
URL:	https://gomo.to/movie/passengers
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="shortcut icon" type="image/x-icon" href="https://gomo.to/public/images/favicon.png">. <meta name="robots" content="noindex">. <title>Passengers - PutStream</title>. <meta name="title" content="Passengers - PutStream"/>. <meta name="description" content=" - PutStream"/>. <meta property="og:title" content="Passengers - PutStream"/>. <meta property="og:description" content=" - PutStream"/>. <meta property="og:keywords" content=" - PutStream"/>. <meta property="og:image:height" content="350"/>. <meta property="og:image:width" content="650"/>. <meta property="og:image" content="passengers-2016-online-free-putstream.jpg"/>. . <link href="https://gomo.to/dsPlayer/player.css" rel="stylesheet">. <script data-cfasync="false" type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/2.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29325)
Category:	dropped
Size (bytes):	29461
Entropy (8bit):	5.314605750585524
Encrypted:	false
SSDEEP:	384:6ocL5Jt24UHTLRNkqGo3snk9XDXiz2QgmRrPmiJ:bwlRUwqGu9XDXizF+W
MD5:	013916AB61482481D8DE9742A0F95BEE
SHA1:	546BB742502FAA36F8C2BB954C2F028187660404
SHA-256:	73CDEA3EA0691F9AC4150BE0C937DC2EE7EAA10205168A84E41EF5C9E05784B7
SHA-512:	1198664A5FE188AC841E49688246A41674986B9996B0B9930B865FBD5CE1A9834B3DB5CA017B2351845FD8EF4E97340DDF71F4C4155F19210851EAADF5AB2D1D
Malicious:	false
Reputation:	low
Preview:	// ProgressBar.js 1.1.0.// https://kimmobrunfeldt.github.io/progressbar.js.// License: MIT..!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b;b="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,b.ProgressBar=a()}}(function(){var a;return function(){function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){return e(b[g][1][a]\|\|a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}return a}()({1:[function(b,c,d){!function(b,e){"object"==typeof d&&"object"==typeof c?c.exports=e():"function"==typeof a&&a.amd?a("shifty",[],e):"object"==typeof d

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	dropped
Size (bytes):	1397
Entropy (8bit):	7.845645040159345
Encrypted:	false
SSDEEP:	24:XxX97Ak4Mj0J/yP4ubqlNUZho6mhst2QTnN8tPGGWrg1FS2jz9bihc0AOXvt/:XpVAk4Mjy/xubiu3ofsgoN8NSYWdh/
MD5:	6BE49FF49C58D6D81FAF666AC92E172E
SHA1:	9A4CF09531294290F139BC04A1CC76C5FB71CDD8
SHA-256:	2DD44E69DD00CF5092B2ED88FD6E4E9C5660D9394F151C99556FBED6E64AD0B3
SHA-512:	17F7DA4533B6C963B0232A7AC26A1038C88DFF79A9FC323AF86EDBFE29E1CCECCE23BDAC26B1CD12F0AB99B100946F431B379BABCDC0DF05F842504AC2D6B99E
Malicious:	false
Reputation:	low
Preview:	..........tV.s.8..W.~8.T-6...\q..4_.I..i~..fd[..#.Y.%....l.............&K...,-r..c&.......A.....N....wi:.lT.....x..I.6)...Z6.......Y?)../.J..t....\|...R..U.+m.s...;...2.,.f...C.1e..].....S;...igZ..`E`TU.T.N.jeO.5y....;A].....,u.&.V...l.....).uj*.\|.i}....3K.".. ..3.&.....L.pR...Ds.V....Y.0b.....cBvU.r.i..I+..f..5d;........^...l.[..<..&......'4.gem..y.o...m.S...\|}d</...)..$R1Y..Kz....<..~..p..q...m.3...q.B..Sv..c<..1...2?.....k..........3.t&.i.....<d.....l.........L......n.........:]...G.LZ.]e..s.x...V...7:...?.3...W.&.[....4i.rg..A...+C0..........`.>..O..(.)...... .'.g..9.....<v.1_C.<.....b.y......7~mM...d..;..tZf.n\|yZ.R+m.7.Fu..@....F.......P.b.s[h+z..h.]D.8.<v'.=. ..%.......f.&...'...nV.h1..C....H..OF ..4...K.^.....R[.r..x..\..........3...o{?.._...\|p.....h.......g...ET.M...."..............l...7.....!(..-.Gz...^8O.....7.......Q.y."...[.Z.3...=]W...>.._..S.,..x... ..p......U....<...........G.W<.T....n..........9..Q.<.l{\|b.nr.~......

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12333
Entropy (8bit):	5.364657656439967
Encrypted:	false
SSDEEP:	384:JA3+DZBsivYiQ0DdGiZi4i4ibFi5puSTOXl4:W+DZLv1XDdXgVVY5cXl4
MD5:	F3E17C3CB5F5F180F6D60C026BBAFFC0
SHA1:	5B3FB4D20F8F31E0BAFB54A308A93C363670C09A
SHA-256:	95916992288DB620C2E638F17C4228AE1D6CDB9B0AE7CA107680505845FF6B4F
SHA-512:	2512FDDB1039879BA6B5918DE983144E035A30B3153BB7A80D4ECE0A1950A3807D7C8F7B3F9D03A1B221F01707BCD332483BFEA622150FF6157BBE8F233D51FD
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/load.js
Preview:	.var http = createRequestObject();..var field = '';..var loadingfilm = '';..function fix() {..return true;..}..window.onerror = fix;..{window.status="Done"}..function createRequestObject() {...var xmlhttp;...try { xmlhttp=new ActiveXObject("Msxml2.XMLHTTP"); }...catch(e) {.. try { xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");}...catch(f) { xmlhttp=null; }.. }.. if(!xmlhttp&&typeof XMLHttpRequest!="undefined") {...xmlhttp=new XMLHttpRequest();.. }...return xmlhttp;..}....function handleResponse() {...try {....if((http.readyState == 4)&&(http.status == 200)){.....response = http.responseText;.....field.innerHTML = response;.....field.scrollIntoView();.....if(!response) window.location.href = url;....}.. .}...catch(e){}...finally{}..}..//#######################################..//# SEARCH HEADER..//#######################################..function do_search() {...kw = document.getElementById("keyword").value;...if (!kw) alert('Please enter keyword to search movies');...else {.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	dropped
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	5.138425798555312
Encrypted:	false
SSDEEP:	12:IUTFHrALCiRmOba5YeVsjVnAaI7GU2nr38EYDI0RWZ1LkUwhBJmcfisOVjVh66Tk:IUT1rAL95W56RANP2nrMEYDI0RWZPUBb
MD5:	822D1AAEFB9A343E788BFD63D5270E37
SHA1:	500EC918BFB859B16CB6B147010924F266591C67
SHA-256:	34310731B79445F958EC982DF1CB3793CEA4F125F0A192A110D08203F4015C10
SHA-512:	07439CF75EFB32634FD2C25AF8DCD56AFA627CFB5B0A99171C54B513C1A38F7CA3B937CEACD7E443D23FC09757A180B0B4ACB2DE43CAE20AB380C40C1F0B2F9B
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.counters.2.js?117
Preview:	new Image().src = "//counter.yadro.ru/hit?r"+.escape(document.referrer)+((typeof(screen)=="undefined")?"":.";s"+screen.width+""+screen.height+""+(screen.colorDepth?.screen.colorDepth:screen.pixelDepth))+";u"+escape(document.URL)+.";"+Math.random();... (function(m,e,t,r,i,k,a){m[i]=m[i]\|\|function(){(m[i].a=m[i].a\|\|[]).push(arguments)};. m[i].l=1*new Date();k=e.createElement(t),a=e.getElementsByTagName(t)[0],k.async=1,k.defer=1,k.src=r,a.parentNode.insertBefore(k,a)}). (window, document, "script", "https://mc.yandex.ru/metrika/tag.js", "ym");.. ym(54046198, "init", {. clickmap:true,. trackLinks:true,. accurateTrackBounce:true. //webvisor:true. });...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9920
Entropy (8bit):	4.897928287687965
Encrypted:	false
SSDEEP:	192:h3TBFFtK4IdIZImfVlVZVdlXI4rWSBXz8bfYnLEnKNcwQ4Mzl+gKxz9kZHSlhY+O:TF3XrXk4hZjoRh
MD5:	DE321ED7CE25BAA8D6EBB211A487A5C5
SHA1:	720AF638773523ACCBD0689E49DEC2C049275FA0
SHA-256:	45BC2EBB82341B0BEB20BF20F0318C5F520E782E2C23DA5280D26AB94E046013
SHA-512:	55CDC4C5D27F4636EFDAF0A2408135D481A99C184076340CC26E42C7AAEDA959108C5A2C645CF97A6254996B171B70F76E403B42B7D43A2F71A5DBB9640FCE92
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/cbv2new/theme/embed_menu.css?21
Preview:	@charset "UTF-8";.@import url(https://fonts.googleapis.com/css?family=Open+Sans:400,300&subset=latin,cyrillic);..* {. box-sizing: border-box;.}.html {. font-size: 100%;.}.html,.body {. margin: 0;. padding: 0;. width: 100%;. height: 100%;.}.body {. color: #333;. font: 1em 'Open Sans', sans-serif;. background-color: #f1f1f1;.}.::-webkit-scrollbar {. width: .65em;.}..::-webkit-scrollbar-track {. background-color: rgba(217, 217, 217, 0.75);.}..::-webkit-scrollbar-thumb {. background: rgba(170, 170, 170, 0.6);. border-radius: 5px;. box-shadow: inset 0.05em 0.05em 0 rgba(0, 0, 0, 0.1), inset 0 -0.05em 0 rgba(0, 0, 0, 0.07);.}..main {. max-width: 1024px;. margin: 0 auto.}..article {. margin: 0 1em;. padding: 0 22px;. -webkit-transition: -webkit-transform .3s;. -moz-transition: -moz-transform .3s;. transition: transform .3s;.}..header {. margin: 0;. padding: 0;. text-align: center;.}..footer {. font-size: 14px;. text

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8913), with no line terminators
Category:	downloaded
Size (bytes):	8913
Entropy (8bit):	5.228010280135802
Encrypted:	false
SSDEEP:	192:ZXoK8jyZGN/9ih12ZMvPzJ/k7zryx0jc5wFw/Dpr:ZlPtur0F
MD5:	67B59EEFE273C40A7B680F282799E018
SHA1:	B2B3FA184C0C5BA0BA1E46D13BA138D53E8CA27F
SHA-256:	206BC2D088FC39FF01896C8A01E4F4B7D4D59F04E67B5F0318AEED22893FB978
SHA-512:	8FF9825D757A28118462F6DFB44536060DE042EF638E79BDA11C09847B808EC105A687CAAB5FA9F306C37AFF11E6EC1D0B745B7F32F9FEB798036AC2199F2E0B
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/jquery.qtip.min.css
Preview:	.qtip{position:absolute;left:-28000px;top:-28000px;display:none;max-width:280px;min-width:50px;font-size:10.5px;line-height:12px;direction:ltr;box-shadow:none;padding:0}.qtip-content{position:relative;padding:5px 9px;overflow:hidden;text-align:left;word-wrap:break-word}.qtip-titlebar{position:relative;padding:5px 35px 5px 10px;overflow:hidden;border-width:0 0 1px;font-weight:700}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{position:absolute;right:-9px;top:-9px;z-index:11;cursor:pointer;outline:0;border:1px solid transparent}.qtip-titlebar .qtip-close{right:4px;top:50%;margin-top:-9px}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{display:block;text-indent:-1000em;direction:ltr}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{width:18px;height:14px;line-height:14px;text-align:center;text-indent:0;font:400 bold 10px/13px Tahoma,sans-se

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	4.461623603233361
Encrypted:	false
SSDEEP:	24:kouZWdgJcy2ydFpLclLSxtio5/6LKdaLZuCqLLZ5QaLZq8LZRcnZvD0lfyqE:GuscBU755qRmiGzuZvQty3
MD5:	56EDE81FA8A77D13596CE22B26AD33B6
SHA1:	BECCD41C7BC17CAFB6233947B4A503A8ADCAB41B
SHA-256:	A50ECD810F992B000DA275ABC8C5CA9548B8C134AEAFE84EA37F60A17B18BE27
SHA-512:	EAFCC49014EDFF1149C8E030A03C2C09B15F3E161AE97A6D7B954BD97E61BF787487FB68C6042FB104CC9DD9A55D4CFF43ABC0A7304EAD8DBECBC1C7845F50A4
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/idg/?su=51A0173443272670518C9622FCF8D1A8
Preview:	<html><head></head><body><script>.window.onload = function() {. var uid_g = '51A0173443272670518C9622FCF8D1A8'; . var uid_s = '51A01734432728D8A25E8186E7DF03A1'; . var uid_su = '51A0173443272670518C9622FCF8D1A8';.. var debug = {};. var pass_uid = false;. var method = false;.. if(uid_g && uid_g.length > 0) {. method = "got";. pass_uid = uid_g;. } else if(uid_su && uid_su.length > 0) {. method = "setu";. pass_uid = uid_su;. } else if(uid_s.length > 0) {. method = "set";. pass_uid = uid_s;. }.. debug.pass_method = method;. debug.pass_uid = pass_uid;.. var ls_uid = null;. try {. var ls_uid = localStorage.getItem('uid');. debug.ls_uid = ls_uid;.. var uid = false. if(method == 'got') {. uid = pass_uid;. debug.uid_src = 'got';. } else if(ls_uid) {. uid = ls_uid;. debug.uid_src = 'ls';. } else {. uid = pass_uid;.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3043)
Category:	downloaded
Size (bytes):	10678
Entropy (8bit):	5.128733107307204
Encrypted:	false
SSDEEP:	192:uH/2CMgHklGcnitQDEUzs7yncvCuS+FptUFPF1jO3QpM1:v/+jFvUFPFBM1
MD5:	D5DF366E5D7101B0D165BC10157E9F0B
SHA1:	B225EBB8FC50D544A9F02714E919C0EC456A8E32
SHA-256:	6096E68D3171A5F58D3671B1D686DD81E4627A7F1C7018525DCC106397EAF9BF
SHA-512:	3D4FA6100EB24916CEEDC681ECCD0D8C80271AF763E82ACF755D2E797A4024ACAA7B5EC65B445C45A40CCCAAB210E28641AD4553B322294B639B14B30AE4A9B5
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/player/embed.3.css?65
Preview:	.media-player .video-js{padding-top:56.25%}.media-player .vjs-fullscreen{padding-top:0}..vjs-v7 .vjs-button.vjs-share-control .vjs-icon-placeholder:hover, .vjs-v6 .vjs-button.vjs-share-control .vjs-icon-placeholder:hover,.video-js .vjs-fullscreen-control .vjs-icon-placeholder:hover,.video-js .vjs-menu-button-popup:hover,.video-js .vjs-seek-button.skip-forward.skip-30:hover,.video-js.vjs-v6 .vjs-seek-button.skip-forward.skip-30 .vjs-icon-placeholder:hover,.video-js.vjs-v7 .vjs-seek-button.skip-forward.skip-30 .vjs-icon-placeholder:hover,.video-js .vjs-seek-button.skip-back.skip-10:hover,.video-js.vjs-v6 .vjs-seek-button.skip-back.skip-10 .vjs-icon-placeholder:hover,.video-js.vjs-v7 .vjs-seek-button.skip-back.skip-10 .vjs-icon-placeholder:hover,.video-js .vjs-subs-caps-button .vjs-icon-placeholder:hover,.video-js .vjs-mute-control .vjs-icon-placeholder:hover,.video-js .vjs-play-control .vjs-icon-placeholder:hover{color:var(--progress-hover-bg-color)}#videooverlay{position:absolute;left:0

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
URL:	https://aqfer.lijit.com/samples/empty.js
Preview:	(function(){})()

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16961)
Category:	downloaded
Size (bytes):	38712
Entropy (8bit):	5.37578995511581
Encrypted:	false
SSDEEP:	384:3OMQBI3XPDPt+H8IO7S7eWFDgFhrZgnVyRbfEDWAfXYb1nE9OqgcF:+NiPt+pMFhrZgibfEDWAfXYb1nE9OqH
MD5:	3F9106E6DBD2205712871F18F7CCE48F
SHA1:	A1CCAFDA39E37A3D0B5D40C6CC9A03834D9C3D43
SHA-256:	293E182BD7D1F39BF025A6B03B61E4A13FB1C8F13B3078DE61833C5CFB90935C
SHA-512:	D50468464620C9153C9F4F3C919C842272A21E38E397C59A730B3172BDD4A60827AA2D3A8FC2DF95AA22C5788EF1ED5B50E4485F9008F613D6BC564891B1CDC8
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/player/video-js.min.css?147
Preview:	.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{position:absolute;top:0;left:0;width:100%;height:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon-placeholder:before{text-align:center}@font-face{font-family:VideoJS;src:url(data:application/font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	downloaded
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1734432780498
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17087
Entropy (8bit):	4.8526551095337
Encrypted:	false
SSDEEP:	192:TuyCZdg13OCO7KmeyTWDUrOLYpCbrE6e+6Tjk0U0fxSslkWrnBTAw2TioaWJ4zCs:UIyJekWYeHEqyUHTioaG4zCpiBzCpi7
MD5:	195A669BAEDA82DBF4896B3DBDA0FD97
SHA1:	5F89C83F48723D6B6963E205F6C0D995C3BBB115
SHA-256:	0C0C4FD2B9A475E86326E5137F26DE12F9040D2783224EC7AD12AE3BAF74532D
SHA-512:	706390982A4A4555F1034A15286BE9D1A3FB699DF3A7B4F526378BA6DC55BAD2CF5AB0547C7DF1885DAE2AC15B128A77D1C98707FAD6569FDFC7F881239424F5
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/app_v31.js
Preview:	.var wow = new WOW(. {. boxClass: 'wow', // animated element css class (default is wow). animateClass: 'animated', // animation css class (default is animated). offset: 0, // distance to the element when triggering the animation (default is 0). mobile: true, // trigger animations on mobile devices (default is true). live: true // act on asynchronously loaded content (default is true). }.);.wow.init();..$(document).ready(function () {.. if( navigator.userAgent.match(/Android/i). \|\| navigator.userAgent.match(/webOS/i). \|\| navigator.userAgent.match(/iPhone/i). \|\| navigator.userAgent.match(/iPad/i). \|\| navigator.userAgent.match(/iPod/i). \|\| navigator.userAgent.match(/BlackBerry/i). \|\| navigator.userAgent.match(/Windows Phone/i). ). {. var android = location.href.match(/#android$/) \|\| navigator.userAgent.match(/Android/i) != null;. if(android){. . } e

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3345)
Category:	dropped
Size (bytes):	3468
Entropy (8bit):	5.332300110951297
Encrypted:	false
SSDEEP:	96:05rHnDaSDpiGqpfN9XnQLcR27yIEuVLAzg:2rH+OwfTnWcR27yCL6g
MD5:	B9CC1EE5FCE5E7B56943458216328E3B
SHA1:	4537838067326009397A688222AA097F4E95A5B6
SHA-256:	B3D1A33A211459596087726303ADC24E3516513EBFC39A336D5092ADD84F2EF6
SHA-512:	30B6AD0A20AF736A6FAAAA6990A0552D230AA5F41DC1DCA6F2BDC95E64D6F239648A9403CA0B1D4F10C12ED13CDD2B0B196ABAE1E2806592C8AB5B2FD26FBE3D
Malicious:	false
Reputation:	low
Preview:	/* videojs-hotkeys v0.2.14 - https://github.com/ctd1500/videojs-hotkeys */.!function(a,b){"function"==typeof define&&define.amd?define([],b.bind(this,a,a.videojs)):"undefined"!=typeof module&&module.exports?module.exports=b(a,a.videojs):b(a,a.videojs)}(window,function(a,b){"use strict";a.videojs_hotkeys={version:"0.2.14"};var c=function(c){function d(a){return 32===a.which}function e(a){return 37===a.which}function f(a){return 39===a.which}function g(a){return 38===a.which}function h(a){return 40===a.which}function i(a){return 77===a.which}function j(a){return 70===a.which}var k=this,l=k.el(),m=document,n={volumeStep:.1,seekStep:5,enableMute:!0,enableVolumeScroll:!0,enableFullscreen:!0,enableNumbers:!0,enableJogStyle:!1,alwaysCaptureHotkeys:!1,playPauseKey:d,rewindKey:e,forwardKey:f,volumeUpKey:g,volumeDownKey:h,muteKey:i,fullscreenKey:j,customKeys:{}},o=1,p=2,q=3,r=4,s=5,t=6,u=7,v=b.mergeOptions\|\|b.util.mergeOptions;c=v(n,c\|\|{});var w=c.volumeStep,x=c.seekStep,y=c.enableMute,z=c.enabl

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	94547
Entropy (8bit):	4.965630711443169
Encrypted:	false
SSDEEP:	1536:g543EE4+ZqsmpCn9RW8eNTTgbCQ0RZuqlEhYJG89YAt90FdeSOVpd/9:g5GExGqBo7bClESJG89YmYdehd1
MD5:	467CDAB4E37EEBFDB80E851B99FCD240
SHA1:	B14C45EF6A3EDBC911DE00596AB01BA5FE750ABC
SHA-256:	DC3EB3CBCB2618EE6E96FA76CF1378347C107E8AE9973CA466448828BC29E81B
SHA-512:	C606A6BC634883707846CEF8C6E7AD1FAA7FC7605C67FB68BFF0538D2346BF59C3F88A1E3A98002E1B44286D46E91A194A30E927C67348E3DC24E36984F565F5
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/styles_v80.css
Preview:	body{. background: #1c1c1c;. font-family: "Arial";.}..abc{. height: 150px;. position: relative;.}..m-b-40 {. margin-bottom: 40px;.}..m-b-30 {. margin-bottom: 30px !important;.}..m-b-20 {. margin-bottom: 20px !important;.}..m-b-5 {. margin-bottom: 5px;.}..m-t-40 {. margin-top: 40px;.}..m-0 {. margin: 0 !important;.}..m-l-30 {. margin-left: 30px;.}..p-t-50 {. padding-top: 50px;.}..p-t-30 {. padding-top: 30px !important;.}..p-t-10 {. padding-top: 10px !important;.}..p-t-5 {. padding-top: 5px;.}..p-b-20 {..padding-bottom: 20px !important;.}..p-l-10{. padding-left: 10px;.}..p-l-22{. padding-left: 22px;.}..w-80 {. width: 80%.}..slide_img_small {. height: 134px;.}..slide_img_big {. height: 341px;.}..box_small {. height: 481px;.}..text_orange {. color: #ff9601 !important;.}..text_danet {. color: #8fda1e !important;.}..title_hover:hover, .title_hover:focus {. color: #ff9601 !important;.}..title_hover_danet:hover, .title_hov

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	380
Entropy (8bit):	5.2386619768465055
Encrypted:	false
SSDEEP:	6:51bNRhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bNR513QvuHnmVZkGdDJH10D+xc15C5
MD5:	331941DBFF0E253761006EDD592AC459
SHA1:	6EA368E1F70C70F6E4D3C7BA5D2FCE6C8B9F99D7
SHA-256:	081A4960AFE39D402267452276BCC980B22C4A803F2DAE1270DB6BFC2B064E7C
SHA-512:	3324C0D944573BCE6B1555C77C99A38AAC51EE83701721404DFE94AF2C6101C8FA0D7F9A35C6CC18DCA0759443F096148BBBAFA77F112A0CCDB34ECEB988BEE8
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=5081";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	downloaded
Size (bytes):	79203
Entropy (8bit):	4.99285403870739
Encrypted:	false
SSDEEP:	1536:gvAzi2rI/zjLtUrbJRJOipofSfStst2zVaUPYPIKj8cekRKjcCWTgYWYOWt0fvfX:gIcH
MD5:	B7F5ECD0721FA5869163F0ED0EAC3119
SHA1:	15CB66AA8580F984584B8B71C2429BFDC04280E7
SHA-256:	26974ADF7D179FA3E83BC7BE0FFDD4F25A5CF670F7F1DDB6D33F866A9A058931
SHA-512:	BEBFCB32EA8C75E225E4FCBC32E48B2559A75349D0CD67B8274006B994860EDB2198EF49128C8D27089489C2A14A15A5D3E854E1B09F321C46AEA42D20EE615B
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/main.css?v=4.0
Preview:	@import url(http://fonts.googleapis.com/css?family=Oswald\|Montserrat:400,700);.body {background: #FFF url(/images/bg.jpg);font-size: 14px; font-weight: normal; color: #333;margin: 0px;padding: 0px; -webkit-text-size-adjust: none; position: relative;}.h1, h2, h3, h4, h5, h6{ font-weight: bold;}.a {color: #82B846; text-decoration:none !important; outline:none; -moz-outline: none; }.a:hover {color: #A8D281; text-decoration: none; }.a:focus, a:hover{ color: #A8D281;}.a:active, a:focus{outline:none;}..mt5 {margin-top: 5px !important; }..mt10 {margin-top: 10px !important; }..mt20 {margin-top: 20px !important; }..mb10{ margin-bottom: 10px !important; }..mb5 {margin-bottom: 5px; }..mr5{ margin-right: 5px; }..mr10{ margin-right: 10px; }..mr20{ margin-right: 20px; }..ml10{ margin-left: 10px !important;}..ml5{ margin-left: 5px;}..dlb{ display: block; }..dib{ display: inline-block; }..fll{ float: left; }..flr{ float: right; }..clr {clear: both; }..btn-block{ border-radius: 3px;}..btn-success{ back

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1935)
Category:	downloaded
Size (bytes):	1991
Entropy (8bit):	4.945399827805848
Encrypted:	false
SSDEEP:	48:eRipH/J2z38qkHac3V3AsrgCuyWqljtHIB4W5:ew/cz3gDFVUyFljtHIB4W5
MD5:	EB9B9B38D2EB8E7DDC60D875BB518030
SHA1:	6B336BC36CC5EC384BC06F6AEB5E2481093A166C
SHA-256:	265CFD4E7CF6E19DF72E987D49834238C8A08CF0B1A29943428F2A8C038D81FB
SHA-512:	BB8A04B099407C91EA9C9C78890B03AC5D7AE23E28C975BA7776AD1B0FFEAF9E3025990A06BBDD93CE35EBEA54D9BD1EBC596CE370E106ACF516EBED2E366CB3
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/videojs-vast-vpaid@2.0.2/bin/videojs.vast.vpaid.min.css
Preview:	.vjs-label-hidden{display:none!important}.vjs-default-skin div.vjs-ads-label{font-size:13px;line-height:30px;font-weight:400;text-align:center;color:#fff;display:none;width:auto;padding-left:10px}.vjs-ad-playing .vjs-control.vjs-ads-label{display:block}.vjs-black-poster{position:absolute;top:0;right:0;bottom:0;left:0;margin:0;padding:0;background-repeat:no-repeat;background-position:50% 50%;background-size:contain;cursor:pointer;background-color:#000}.vjs-has-started .vjs-black-poster.vjs-hidden,.vjs-using-native-controls .vjs-black-poster{display:none}div.VPAID-container{position:absolute;top:0;left:0;width:100%;height:100%}div.vjs-vpaid-ad div.vjs-progress-control,div.vjs-vpaid-ad div.vjs-time-controls,div.vjs-vpaid-ad div.vjs-time-divider{display:none}div.vjs-vpaid-ad.vjs-vpaid-flash-ad div.VPAID-container{background-color:#000}div.vjs-vpaid-ad .vjs-tech{z-index:0}.vjs-ad-playing .vjs-progress-control{pointer-events:none}.vjs-ad-playing .vjs-play-control.vjs-paused,.vjs-ad-playing .

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1458)
Category:	dropped
Size (bytes):	12301
Entropy (8bit):	4.986700983637058
Encrypted:	false
SSDEEP:	384:UpBsxVzZjiD2fcAOw5o5p5X9N4sIVqxsbJ5t:q+3G0sIVq6J5t
MD5:	B167EA223CEB9BC6B6C71737553ED844
SHA1:	B13E26023DD525BA52DF4340B1A74625D9D1F895
SHA-256:	E33F8BD23FBD0C570983FC5EE30E2429D7D1A65683080F8D4841783CD0CAB26D
SHA-512:	EE09D85E16731A309D794B8E9A41A9CF20EC0EEDDC732A0BCB5461BC0F88F08A098EC9C01EFFFB163D1DD91499F4120CBBB825F0244B3B24B0913B0AB2308184
Malicious:	false
Reputation:	low
Preview:	/! @name @yangkghjh/videojs-aspect-ratio-panel @version 0.0.0 @license MIT /.(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory(require('video.js')) :. typeof define === 'function' && define.amd ? define(['video.js'], factory) :. (global = global \|\| self, global.videojsAspectRatioPanel = factory(global.videojs));.}(this, function (videojs) { 'use strict';.. videojs = videojs && videojs.hasOwnProperty('default') ? videojs['default'] : videojs;.. function _inheritsLoose(subClass, superClass) {. subClass.prototype = Object.create(superClass.prototype);. subClass.prototype.constructor = subClass;. subClass.__proto__ = superClass;. }.. function _assertThisInitialized(self) {. if (self === void 0) {. throw new ReferenceError("this hasn't been initialised - super() hasn't been called");. }.. return self;. }.. var version = "0.0.0";.. var MenuButton = videojs.getComponent("MenuButton");.. va

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	145161
Entropy (8bit):	3.893058770622432
Encrypted:	false
SSDEEP:	1536:ouJRGdbe/x/KviAVsBtB6lOVxdm3NSZR5rshCvBzuNJRCSBsgwMkojWntoApuszn:2C/x/KviAVsBtB6lOVlZ6wk+YyD
MD5:	481F450B2AAFF3D814D43AA0C768EC4A
SHA1:	851BB6A791232109766D5B665689A5B4DDB67611
SHA-256:	327B97D7453A77010A4718F369B795E00549671B5C628EDAF8A99FC803CC77B3
SHA-512:	D017A3104109933009EAF0BDBA70DEEAD54FC1B96BECA2451FF59E11A88BE10FA286A9EED6B6522EAAD1922EDED9E27753B20ABE38960D50471F8C923964A2AF
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@silvermine/videojs-chromecast@1.3.2/dist/silvermine-videojs-chromecast.min.js
Preview:	/! @silvermine/videojs-chromecast 2021-06-22 v1.3.2 /..(function() {. function r(e, n, t) {. function o(i, f) {. if (!n[i]) {. if (!e[i]) {. var c = "function" == typeof require && require;. if (!f && c) return c(i, !0);. if (u) return u(i, !0);. var a = new Error("Cannot find module '" + i + "'");. throw a.code = "MODULE_NOT_FOUND", a;. }. var p = n[i] = {. exports: {}. };. e[i][0].call(p.exports, function(r) {. var n = e[i][1][r];. return o(n \|\| r);. }, p, p.exports, r, e, n, t);. }. return n[i].exports;. }. for (var u = "function" == typeof require && require, i = 0; i < t.length; i++) o(t[i]);. return o;. }. return r;.})()({. 1: [ function(require, module, exports) {.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7758
Entropy (8bit):	5.140570983824152
Encrypted:	false
SSDEEP:	192:JuY1qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLan55TFkY0yW/GaKdgH:fUIhymDAZJFDfRLanXTO3ll7
MD5:	B4F1FB4D409FFF6A313945619F1AD1F0
SHA1:	E89F405D73B1607C03AB41C8065839276CC81FB2
SHA-256:	D75F0449CCC961DE98743C74A76FF2FADF34AC48203C268E2449C5BA51B26E38
SHA-512:	78C7CD142DB1225A645AF8944D8876DB56E5A19B7EC3235DC1BA4B51FC69B705BE8CC5EAE37641FB477B3ECABED5CB4206799B3BB2F6EBFCFC485C56A2844234
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "51A0173443272670518C9622FCF8D1A8";. var su = "51A01734432773EB48DC132D10ED9CE7";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3121
Entropy (8bit):	5.078590661266263
Encrypted:	false
SSDEEP:	96:GhItyVx2cgHppvb6LhoBIN0/ZljDKVQpF:GKyjvgHK+1ZsSF
MD5:	D5528DDE0006C78BE04817327C2F9B6F
SHA1:	31E1BCC4CF805A2C2FEE21F48DED1E598F64A2A8
SHA-256:	B84161C9FBF7520CD14E7019F92120BD87A928A074156E91A992EBA9FC9436E8
SHA-512:	69484BDB1382AE92C4B860F97FAB601DB2D8117469619F06E720FE5A516B5EB3F2D88AD6065BBA6E28790BD1FAA86B20AA753A9A0C7A2AD53C4EB787A404A9AF
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
Preview:	/!. jQuery Cookie Plugin v1.4.1. * https://github.com/carhartl/jquery-cookie. . Copyright 2013 Klaus Hartl. * Released under the MIT license. */.(function (factory) {..if (typeof define === 'function' && define.amd) {...// AMD...define(['jquery'], factory);..} else if (typeof exports === 'object') {...// CommonJS...factory(require('jquery'));..} else {...// Browser globals...factory(jQuery);..}.}(function ($) {...var pluses = /\+/g;...function encode(s) {...return config.raw ? s : encodeURIComponent(s);..}...function decode(s) {...return config.raw ? s : decodeURIComponent(s);..}...function stringifyCookieValue(value) {...return encode(config.json ? JSON.stringify(value) : String(value));..}...function parseCookieValue(s) {...if (s.indexOf('"') === 0) {....// This is a quoted cookie as according to RFC2068, unescape.......s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\');...}....try {....// Replace server-side written pluses with spaces.....// If we can't decode the

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	11588
Entropy (8bit):	5.31980346284753
Encrypted:	false
SSDEEP:	192:NedB0q4KfqKrbqGIwV4MHP7leA85q1bfqbrbqGIwV4RePq8:48UqY49f7qY4A
MD5:	E5B14BBE77505565B90A390333E6CB80
SHA1:	AB907D9E4FCE2AE1514DD30CF96594C31AE779A4
SHA-256:	CB65047A753E2686044F6886B8AD1C7C1BBFC089BE5575984A88EF5D58BA72D3
SHA-512:	63DB447B4953D0B475B807557D5232B27643982EEE33F737BD1C822543866D875F54839EAC4D53EF020B6FF36D215C211C23420473A16B7C321498905424FFEE
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,300&subset=latin,cyrillic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 141, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	64833
Entropy (8bit):	7.977864562403112
Encrypted:	false
SSDEEP:	1536:RhOlayx3BnoNL/GNNir0q4uA3i47R86ZM3K8qQJ/z:CsoNELUU0BFXqz
MD5:	6A06E0BCCED3AB83F9D197C0AFDA529F
SHA1:	5EF39772C105FAC8667B6505BBA3741B21FBFC56
SHA-256:	AEB6B7FBAE0942BC2348E708DBD7442F57F4BCE3DB5D6551C145AC4106E3F53F
SHA-512:	A59B52E8F2606E377C8D7292BAD86E1F945FA5BE65B1BDAB0EE54B3F7C64D1FA00A770BA987DD8B7FBC28184009BD451990600EFC443EF618E180CBA8A579D80
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/logo-footer.png
Preview:	.PNG........IHDR..............rH$....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME........d......IDATx..u.T....T.......]......<xh.I.....@pw.n......@.^U{.?..w..;3In&.....]r..}j.^k.%..i.l..s..'.I.....Q.R&.....X.=.k......3.5.).......Vy.3.9...f.k.{.d.._.b..[Y.Z../..>~...+...gccccc.[`...Xp...np((...xc?q.'...{...'d....r.OVU.z....i\...8..#f..S.[...........'....XhO.........._..G6...p.F..q.3.Mw.y../}..<..g.L...r_N.Z...@RN....2a]...\|..3.Y=..Hgm+K.w_[;..FW.\|....j...eDHaO%........_~.#....'h#.TpmM.#.<[]o2......k:X.q.....S=.].@..k..%.g.......03.......I.4..\|.,c.7..d.=.llllll.s..;.o.&{.>&.5.6.....@O;.I.....J..j..h..9..]f.G.R4Q...!FH-.y.a.rO.?..p_.....'........._~..........QC..L{\..4.ll.........N....<.<.)..E..q...V:..#..fz.G.-.Q...7.o.s......X .rt..U{...........w8:...;W...l=.....zdO{...O<&...q~..?.x...k{..k./i.. .W.W...+....x....&.:<q.L..3\..f...j....$.B666666.9..P..8.#.....5.+6..n..~..f.....RC.C. .2.....M..6W.....2.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 31, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	18928
Entropy (8bit):	3.4764345542690176
Encrypted:	false
SSDEEP:	192:HSWOK+AWdcL6dOwk6a2N5BzRSCb3kC4x9fCdzr:yWwNLOr6/5ZRT9
MD5:	C7BCC7CEA19CD0C9CBD4EE54241D6BD9
SHA1:	65824F9AAA1FED923081E2D15D97DF2A714E7C10
SHA-256:	D6D1B18C4136C4EE88707D6D87CC129E0635B71A9716D3515740EEC29C36C7FA
SHA-512:	2A2031782E0788DA3506CD47620AF8F646A1FB38A6BA4BD2F8C893E404D22641E20C9B993A8E08AAC0CE2FC210646F1B1B4715F368A6C9D730E2947872CFF112
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/btn-overlay.png
Preview:	.PNG........IHDR.............O.94....pHYs.................iCCPPhotoshop ICC profile..x..]l.U....93k..U.-I...!.Y.(........n.-..D...c...........P.......D..D.Bn0....1.p..'$$.(........7.............I.f.P..Yk....B..XA7+*v.gJ."@..].]...#........Z1-...........A.O..!..l?..!..@..?1.....Z..@.T...t.....N..].LC.$.;..k.8.......rl.\.Z%.:........f...Z`e03......+..@.$N..(..$..9..[.]?....\..... 9XU..#...7...w...^.VA.[ojx.U{...&.u..[.CE..4....Zm.j.G"].:-sy...7g.{....y07._.<\..n.._..)...&.B9.....R......HK.d..]....`.+.P..j..{...i]..[.U.-.....j..\|....S/Io.../QA.`.....,...b.hP.....C.....L!..A.0..%@RB.Z.......(.l.z>..E.?.........O...OC..i.M...Q.;.v.%...]"'._.h.b.Y...y.&..2..r........ X........%.p.f.+....[qGG..~M.._..W..N...>...W.....;..tV.....Y$..26..8.#_=..$N.xq.#U.xw../..)_..=......).g.R...G..w........y,.vV.F.N.D.2vV......-..Z.Ys....3.O.......b......}nq..{...m....b7 .038.U.x8.@.....q.V...[..}.{..!...y#gd..MF....cd:...#g.....=..^fR..!.@.?..Z=.....

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (794)
Category:	dropped
Size (bytes):	9449
Entropy (8bit):	4.253033982008109
Encrypted:	false
SSDEEP:	192:xkv7QP7gDaxBW/fivDaxAktWyi4oyoqNVOOzJWzqFBBiewi6ZmMLW:wUBnUAGT1TgaV
MD5:	02D3A18C66EB0D3A9C943B9CDF68BC46
SHA1:	C5E081069E72DA753AA9848279F9249150193EE5
SHA-256:	D53EC6964B8FD7E12196DCD6D2FD2B53ECAA5FDBC2E51BF05F6DFBA39B19EABE
SHA-512:	B424F4B31D7F0EA6486CDE2C2E76C84817A14CA89636CBCD3AE12297C79D793F9B6EE4433AA8B6C0129A47D8A96B52AE67F9ADD4E5E0EC8D369EC30CD988D271
Malicious:	false
Reputation:	low
Preview:	var setvtttimer = null;..function ass2vtt(ass) {. var re_ass = new RegExp(. 'Dialogue:\\s\\d,' +. '(\\d+:\\d\\d:\\d\\d.\\d\\d),' +. '(\\d+:\\d\\d:\\d\\d.\\d\\d),' +. '([^,]),' +. '([^,]),' +. '(?:[^,],){4}' +. '([\\s\\S])$',. 'i'. );.. function fixTime(time ) {. if (typeof time == 'undefined'). time = '';. return time. .split(/[:.]/). .map(function(item, index, arr) {. if (index === arr.length - 1) {. if (item.length === 1) {. return '.' + item + '00';. } else if (item.length === 2) {. return '.' + item + '0';. }. } else {. if (item.length === 1) {. return (index === 0 ? '0' : ':0') + item;. }. }.. return index === 0 ? item : in

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 182x268, components 3
Category:	dropped
Size (bytes):	9292
Entropy (8bit):	7.958315201190342
Encrypted:	false
SSDEEP:	192:1CynI1CHWX0aYpiqo2e66qaCK/Wb0SMkj2YxAA04K1hJRBaIbZ1M:1CyqUWX0amazWK/Wr9d2RRBL91M
MD5:	7F540666329D5CB68C05E32204F59A41
SHA1:	702E9C81EBA2DC840951C44764FA537D75D79052
SHA-256:	77CF71A181434D33228017E45CD7AADAC0B7375D5D4324757181228E5CF6D77E
SHA-512:	EC64766ACDB1D5AC04761DE0815724B60E1C8512B22408CCEC0A27FC9795DFAF37047301E188A92744AE2840D817DF5D0DBF2DA418652EE8944BE5DB8DEE9342
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................... ....+!.$...2"37%"0....................".........................."..............#............."..............................................................!1A."Qq.2a.#BR......b..3S..$C..............................................!..1.AQa"Rq...b..r................?../..r}......s#w......r{.W....Z..<.RA..GF\|....{.N.W.F........+.V....d..c.GS.......^M.w.?...7p.#....=.z.[.._.hd....e..v=0;f.bVV..0Z...@...4.>.$..;..C.....W...S..{.......?..7.z...1S..i.v....Py;W9S...L3>.\|..X.W..;.`.d.........O\..5.0..Y.a...p.2..A.0...5.....s......X.J.....u>..r.7.1T...$.....l..+...n<....~..T.#b.....9....d..K.C...A&.=x.fg..F...h.D..2...q.W..z..DCF.?.s..P.....hA.0N23.~.&i.]^..E..[L..TU.-.8.I .KJ....b%U.X..=..}(....lr..}>.O.=.`x5%lt...x....x..:=J+.&.7..V.pv.....P.Y.m.;.........}.n....(#. _..?By.[f...Vw....a...~.*.?.In_.c%`...^..#^f.o6=.....d..j.......jS..)p[.0.Q.d>......B!..R[q...'.SS_L./n\..IV......

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3291)
Category:	dropped
Size (bytes):	64400
Entropy (8bit):	4.756016715013031
Encrypted:	false
SSDEEP:	1536:FphdME8rjfX0LmXsQEMe+uOVhOFKqY3RmuRrqr5RxI/gCQxgsp+gn:/hdSfAQK+gn
MD5:	0885A777C714486ECDB35160F9045174
SHA1:	3D6B8801002AB09BE5F890513BF2738C4AA9809D
SHA-256:	BE75E383D4E92E15EEA94D0E7153BBC7E0E947F1F5A427952CB49E43F23F494B
SHA-512:	7AA2E8364D873FF5F550233B5AC1E0D3391EA32577CBB78A69305ECC26684A100B2DB26261CA375C391C23AA805500D08868778298725562D823C0CD51681ADF
Malicious:	false
Reputation:	low
Preview:	./. . * More info at [www.dropzonejs.com](http://www.dropzonejs.com). . Copyright (c) 2012, Matias Meno. . Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in. * all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2978)
Category:	downloaded
Size (bytes):	3047
Entropy (8bit):	4.694530425785689
Encrypted:	false
SSDEEP:	48:+48f6kRkHNHcSHPHv2HLHaVFV6H/FHCKVMH/3HC+VIH/jHC9HSHAH0H3H/6H/IHH:+48fPRkHNHcSHPHv2HLHaVFV6H/FHCK5
MD5:	0029E25D10F97729F25F028B44DABDE9
SHA1:	9FE30858C0E44427290A9751A69E2F7695155F5F
SHA-256:	C3929CC1F5B18E657BEA8A895C122D9DA5350A51219EB9EB0235258D710ED6F7
SHA-512:	9563D1200F4FA4E56DBD93A032BAD0AA790CE879D6E1DD4B40ECF1253DCA0C8118CBDEE3C1A48CD7154F5EFCD3D47A09A855B1F62AC88FF2EBF5C1A1B690617D
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.css
Preview:	/! @name videojs-seek-buttons @version 1.6.0 @license Apache-2.0 /.@import url(https://fonts.googleapis.com/css?family=Material+Icons);.video-js .vjs-seek-button{font-family:'Material Icons';cursor:pointer}.video-js .vjs-seek-button.skip-back::before{content:'\e042'}.video-js .vjs-seek-button.skip-back.skip-10::before,.video-js.vjs-v6 .vjs-seek-button.skip-back.skip-10 .vjs-icon-placeholder::before,.video-js.vjs-v7 .vjs-seek-button.skip-back.skip-10 .vjs-icon-placeholder::before{content:'\e059'}.video-js .vjs-seek-button.skip-back.skip-5::before,.video-js.vjs-v6 .vjs-seek-button.skip-back.skip-5 .vjs-icon-placeholder::before,.video-js.vjs-v7 .vjs-seek-button.skip-back.skip-5 .vjs-icon-placeholder::before{content:'\e05b'}.video-js .vjs-seek-button.skip-back.skip-30::before,.video-js.vjs-v6 .vjs-seek-button.skip-back.skip-30 .vjs-icon-placeholder::before,.video-js.vjs-v7 .vjs-seek-button.skip-back.skip-30 .vjs-icon-placeholder::before{content:'\e05a'}.video-js .vjs-seek-button.skip-for

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1227), with no line terminators
Category:	downloaded
Size (bytes):	1227
Entropy (8bit):	5.126019489229876
Encrypted:	false
SSDEEP:	24:bnryFSODqLR31LUM/y2YHSMMbZ8+3nWALyIFaQRSXFUK0/XE37Enc+DzU/y+:bryFRDqLL/y2wwb5nWAZaV1UXcIcMzd+
MD5:	981CE49E4C69148552B01CBBE30F0858
SHA1:	9CB566FA0E6CFDA06FE4721214ACC445D443EF07
SHA-256:	458CC3BE215BEF898D5E6A41E25F0C022E6D5D5E61ADD13F13C01898BB53B9BC
SHA-512:	2577D9353C0172FA0E9AE38834BD25CB9C97892F5C90B7B3D186C0A6E55D8EEBD66F19133C5881B8E5D4CC575D0FFCEE31D6A33C42F4F62ACC0CAE9DA07772CA
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.jquery_plugs/modernizr.js?12
Preview:	!function(n,e,o){function t(n,e){return typeof n===e}function s(){var n,e,o,s,r,f,l;for(var u in i)if(i.hasOwnProperty(u)){if(n=[],e=i[u],e.name&&(n.push(e.name.toLowerCase()),e.options&&e.options.aliases&&e.options.aliases.length))for(o=0;o<e.options.aliases.length;o++)n.push(e.options.aliases[o].toLowerCase());for(s=t(e.fn,"function")?e.fn():e.fn,r=0;r<n.length;r++)f=n[r],l=f.split("."),1===l.length?Modernizr[l[0]]=s:(!Modernizr[l[0]]\|\|Modernizr[l[0]]instanceof Boolean\|\|(Modernizr[l[0]]=new Boolean(Modernizr[l[0]])),Modernizr[l[0]][l[1]]=s),a.push((s?"":"no-")+l.join("-"))}}var a=[],i=[],r={_version:"3.6.0",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(n,e){var o=this;setTimeout(function(){e(o[n])},0)},addTest:function(n,e,o){i.push({name:n,fn:e,options:o})},addAsyncTest:function(n){i.push({name:null,fn:n})}},Modernizr=function(){};Modernizr.prototype=r,Modernizr=new Modernizr,Modernizr.addTest("localstorage",function(){var n="modernizr";

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	4.766342830150738
Encrypted:	false
SSDEEP:	24:yXx6Ng0ZY4waygujbwzRnuAbrkgyg+gng9oLLVZibRLc7gR7MS1GDoLvbYcDM01I:yQNfZ3HyN1AHmoLLTibRLKqSoLzYCK
MD5:	6BA020052E2E5831EAA7A95BF1A05092
SHA1:	29849E7BA7CDA5584B9A43FA463070577FEBB3D1
SHA-256:	169A1434C4148D441A9FF523569BB171A5294D0DA5DB2220FAE0679A95ACCA3E
SHA-512:	416806257C36E82567708447EA289442144EB2EBAAE92A027EDA4DB49A2E08D929117A7A3A0B3A3C0F5F6B450E34EBFFDEA693B9F21DEF1A3A1B54865AC96B0B
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.css
Preview:	/* a wrapper element that tracks the mouse vertically /..video-js .vjs-thumbnail-holder {. position: absolute;. display: none;. overflow: hidden;. outline: 2px solid #2a2a2b;.}../ the thumbnail image itself /..video-js .vjs-thumbnail-holder .vjs-thumbnail {. position: relative;. left: 0;. bottom: 1.3em;. opacity: 0;. padding: 0 !important;. border: 0 !important;. max-width: none !important;. max-height: none !important;. transition: opacity .2s ease;. -webkit-transition: opacity .2s ease;. -moz-transition: opacity .2s ease;. -mz-transition: opacity .2s ease;.}../ fade in the thumbnail when hovering over the progress bar /./ .fake-active is needed for Android only. It's removed on touchend/touchecancel /..vjs-progress-control:hover .vjs-thumbnail,..vjs-progress-control.fake-active .vjs-thumbnail,..vjs-progress-control:active .vjs-thumbnail {. opacity: 1;.}../ ... but hide the thumbnail when hovering directly over it */..vjs-progress-control:hover .vjs-thumbnail:

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1734432728201&dn=AFWU&iso=0&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&t=Watch%20Passengers%20Online%20Free&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4292)
Category:	downloaded
Size (bytes):	4636
Entropy (8bit):	5.501046463408914
Encrypted:	false
SSDEEP:	96:rDAwlnIglnIJlPolPeilPilHlAU2EWuSySCxSySCU5aCKX6zNl/jwlnIglnIJlP8:vAaIKITIeSpU2ERX6xtaIKITIeSlS+H5
MD5:	0E455C930EB772725553D8AB1F92FDC6
SHA1:	E3B6EDF2D24BBF1EC3AFEB8FAE51BC25D4F18E52
SHA-256:	419B600E2A3D2523ED458633A946A9A07FCF046077F0EA79F3E435F154F04EE7
SHA-512:	C2DB4DE85BC8E7E89402C7287CB1CF68127C80F5DCDB28367AAB80C3D7B946C55EDF1DA8C3D47F983B6E7AC923F83B8CC09AB7CD6D27D41DC566B97EC7652BD7
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/websocket_ip.min.js
Preview:	/*. Minified by jsDelivr using Terser v5.7.1.. * Original file: /gh/joeymalvinni/webrtc-ip@3.5.4/dist/bundle.dev.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.function is_ipv4(d){return regex_v4.test(d)}function is_ipv6(d){return regex_v6.test(d)}var simpleIPRegex=/([0-9]{1,3}(\.[0-9]{1,3}){3}\|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/g;let regex_v4=/((25[0-5]\|(2[0-4]\|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]\|(2[0-4]\|1{0,1}[0-9]){0,1}[0-9])/,regex_v6=/((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}\|:))\|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}\|((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3})\|:))\|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})\|:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3})\|:))\|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})\|((:[0-9A-Fa-f]{1,4})?:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(([0-9A-F

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	373826
Entropy (8bit):	5.40837025125756
Encrypted:	false
SSDEEP:	6144:qg2vDNaAQsJOEGPkI+le1ysXqJx0eR8h7j/lU:oNQskEGPkVs5qJxgtU
MD5:	08E876ED4E2A180C10B9060328831BC3
SHA1:	9FD990B25BA53DDD3C0E93F6447FCA80F66B2123
SHA-256:	14DA65A959333E16D1406D40E6F2EF65F55D23BD9158BD4EC353BA57B16C78F2
SHA-512:	AACA4A43EBCDB75304AEC4568F85FD9F0F3F07090696612F251ACBF6CCC4D52306AA493FFCA5CD43AC33F349E6B47E93070362D2A4E583893E593E8EE95EAC0C
Malicious:	false
Reputation:	low
Preview:	"undefined"!=typeof window&&function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Hls=e():t.Hls=e()}(this,(()=>(()=>{var t={21:(t,e,r)=>{"use strict";r.r(e),r.d(e,{default:()=>u});var i=function(){function t(t,e){this.subtle=void 0,this.aesIV=void 0,this.subtle=t,this.aesIV=e}return t.prototype.decrypt=function(t,e){return this.subtle.decrypt({name:"AES-CBC",iv:this.aesIV},e,t)},t}(),n=function(){function t(t,e){this.subtle=void 0,this.key=void 0,this.subtle=t,this.key=e}return t.prototype.expandKey=function(){return this.subtle.importKey("raw",this.key,{name:"AES-CBC"},!1,["encrypt","decrypt"])},t}(),a=r(145),s=function(){function t(){this.rcon=[0,1,2,4,8,16,32,64,128,27,54],this.subMix=[new Uint32Array(256),new Uint32Array(256),new Uint32Array(256),new Uint32Array(256)],this.invSubMix=[new Uint32Array(256),new Uint32Array(256),new Uint32Array(256),new Uint32Array(256)],thi

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2071
Entropy (8bit):	4.924335765093714
Encrypted:	false
SSDEEP:	48:RV1VtPBgr85o1Vth1b5o1Vt51b5o1VtmN1gTu7yGh7kS7n57Eh7sD7rWD7EMQo7N:RV1qr6o1d1lo111lo1SR7Lh7kS7n57EX
MD5:	248E1E80EC537ABDBF2778FD9E1BF3EA
SHA1:	1E01BE9C9D80334A1EFB2AB6C845DC326F547A39
SHA-256:	5EDE4173A393FD945B229187971003C8953C7DAE5E0ACE92ED1B577C1B313991
SHA-512:	8ACEDD298C00650387DD690411CB348C2EF0BA68B366FEDD73B9DE36295D53423D6AF55179FF80274B3F508C4A479F83367C58576DF9D9F9C5167D327BEC8CB7
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/player/cast.css?1
Preview:	.vjs-chromecast-button .vjs-icon-placeholder{..background:url("/styles/player/ic_cast_white_24dp.png") center center no-repeat;..background-size:contain;..display:inline-block;..width:20px;..height:20px.}..vjs-chromecast-button:hover{..cursor:pointer.}..vjs-chromecast-button:hover .vjs-icon-placeholder{..background-image:url("/styles/player/ic_cast_white_24dp.png").}..vjs-chromecast-button.vjs-chromecast-casting-state .vjs-icon-placeholder{..background-image:url("/styles/player/ic_cast_connected_white_24dp.png").}..vjs-chromecast-button.vjs-chromecast-casting-state:hover .vjs-icon-placeholder{..background-image:url("/styles/player/ic_cast_connected_white_24dp.png").}..vjs-tech-chromecast{..display:-webkit-box;..display:-webkit-flex;..display:-ms-flexbox;..display:flex;..-webkit-box-orient:vertical;..-webkit-box-direction:normal;..-webkit-flex-direction:column;..-ms-flex-direction:column;..flex-direction:column;..-webkit-box-pack:center;..-webkit-justify-content:center;..-ms-flex-pack:c

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.7504733810175
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikXNKr4GfwY:IgymGfkY4GfwY
MD5:	79BE7F1A347233634689581FADB7E5BF
SHA1:	0122C08E1CEC98A27E7734F22F581E117B459F40
SHA-256:	D51CE66B496388F21BBB21C645854756D6AC6BAAA3BB2C9A44BF9F63BD4FC6B7
SHA-512:	17742F2D34B09CC155AE9E457B6AC168F0B1DE7D68B44D599F0EB440CF46CAC937D3DFA0AC9CA599B9E8277E2820D4E4025D6F84AE6D6FFD6F972884A98ABBFB
Malicious:	false
Reputation:	low
Preview:	try{_dtspv.c({"b":"chrome@117"},'128n');}catch(e){}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47868)
Category:	downloaded
Size (bytes):	150720
Entropy (8bit):	5.2843448448406996
Encrypted:	false
SSDEEP:	3072:NCtJbs49nR2F3HGJCt1+0rrRVkq/jBitc6gVreFmky:NCExHLtN/8y
MD5:	1DFF3885443DE8A2410520E0E75B7E3F
SHA1:	8B6DBE48A86DC0ECFB60FE484AC16DCEFD5B552E
SHA-256:	324FA25CEA14C1670772F7FE8DAE21E50AE419090673710B5E59C717810FFD6B
SHA-512:	3ACD19FCDBB208B8094A21EF586E101E92E66AD57095F115102F8AD0915022495E35FB39ABDC925C7F60DC51B47AAF1D75F8D8A705C9272E04CEF70CD221291E
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@webtor/p2p-media-loader-core@0.6.2/build/p2p-media-loader-core.min.js
Preview:	require=function e(t,n,r){function i(o,a){if(!n[o]){if(!t[o]){var h="function"==typeof require&&require;if(!a&&h)return h(o,!0);if(s)return s(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var c=n[o]={exports:{}};t[o][0].call(c.exports,(function(e){return i(t[o][1][e]\|\|e)}),c,c.exports,e,t,n,r)}return n[o].exports}for(var s="function"==typeof require&&require,o=0;o<r.length;o++)i(r[o]);return i}({1:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.BandwidthApproximator=void 0;const r=15e3;class i{constructor(e,t){this.value=e,this.timeStamp=t}}n.BandwidthApproximator=class{constructor(){this.lastBytes=[],this.currentBytesSum=0,this.lastBandwidth=[],this.addBytes=(e,t)=>{for(this.lastBytes.push(new i(e,t)),this.currentBytesSum+=e;t-this.lastBytes[0].timeStamp>r;)this.currentBytesSum-=this.lastBytes.shift().value;const n=Math.min(r,t);this.lastBandwidth.push(new i(this.currentBytesSum/n,t))},this.getBandwidth=e=>{for(;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	13982
Entropy (8bit):	5.100941655750857
Encrypted:	false
SSDEEP:	192:O/A2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5U:mLsrqh56lUb4kolhTc
MD5:	626BE86ED51EEF8B8B4038B6DCB8FCB2
SHA1:	229B2C503C8A0ACC4BB1B423C895FC30330A0723
SHA-256:	7E5965A6EB681EF5F8A59DACD6E8C8263DCBBB512E441E532FEE942A90C4C7EA
SHA-512:	8518727AA4F483D1ABCFEBEEF69BC37562F74D2BBA0E80D211E5249A8E9D7F943FC2A755C7666E9C9590456A68A0143A9EADF6797D72914E770BDF3357CEA58E
Malicious:	false
Reputation:	low
Preview:	/.. FuckAdBlock 4.0.0-beta.3.. * Copyright (c) 2013-2015 Valentin Allaire <valentin.allaire@sitexw.fr>.. * Released under the MIT license.. * https://github.com/sitexw/FuckAdBlock.. */....(function(window, instanceName, className) {...var debug = false;...var debugName = 'FuckAdBlock';......var FabUtils = function() {....var self = this;....var options = {};........this.errors = {.....throwError: function(name, method, type) {......throw 'Argument "'+name+'" of method "'+method+'" is not an "'+type+'"';.....},.....isObject: function(value, name, method) {......if(typeof value !== 'object' \|\| Array.isArray(value) === true \|\| value === null) {.......this.throwError(name, method, 'object');......}.....},.....isArray: function(value, name, method) {......if(Array.isArray(value) === false) {.......this.throwError(name, method, 'array');......}.....},.....isFunction: function(value, name, method) {......if(typeof value !== 'function') {.......this.throwError(name, method, 'function');....

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63526)
Category:	downloaded
Size (bytes):	128474
Entropy (8bit):	5.095006529228904
Encrypted:	false
SSDEEP:	768:+Mlu+Klk3YlEfhYUf+yBQWlJxtQ5INHHlRSqITm8qAdwFKbv2ctBDI35UPyu8pst:zlunljUfZL4INHHlRSC8p5b5ZPUpE
MD5:	259E7C3098C83538E6D71A963059BC89
SHA1:	06053DA38418B3931249921321B49EED4B22BD68
SHA-256:	BF562EE887113EE3085FCD9EB5C048C170BF457714C417DD45C8C9EA14B167E7
SHA-512:	6A77450759F389A78FD576B28DC6C345D7B8E328158A63763B44F7D9FB49260933CE2A5AB35F7C70246B685D6CC4E6D456127628F2A553C73EAE5F19B44DC329
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/bootstrap.min.css
Preview:	html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{margin:0;font:inherit;color:inhe

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	28461
Entropy (8bit):	5.04996511430083
Encrypted:	false
SSDEEP:	384:mMtBM7k5OI7Q3ZrhTVmdFK71BrWQlmICQLLIIIvoeDQGROllc5U87RKjXBUY+5/j:m8M75zmKPHlawI9RdqvXDF1P6
MD5:	B240230FBBE16A2EBB3F8F8A4C65427E
SHA1:	66E6C825E69A81A9D0B1F240790680811504C8F2
SHA-256:	340FE3143B21A42EB31A4DDC20E62E26A051D5C6AED0F98B52D4D2173DD7281C
SHA-512:	53E0F6DA1CE96A7E5691E1DE59578540F36B7740719D67CAE362E6B4CE774237A3E1083FAAF08D1C78FAC91DF239584A9382C526738E9AD37907BCC7BC9AAEED
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/peer5.videojs5.plugin.2.js?150
Preview:	/* eslint-disable spaced-comment */....var damainObj = Array();..damainObj.push('h20sxm');.damainObj.push('k8s1sw');.damainObj.push('nfjser');.damainObj.push('t8hmeu');.damainObj.push('02cln3');.damainObj.push('83n306');.damainObj.push('9idk8z');.damainObj.push('ae72z5');.damainObj.push('f0wcg1');.damainObj.push('vasrol');.damainObj.push('cgutbm');.damainObj.push('g0o9ii');.damainObj.push('39e653');.damainObj.push('hj8pgn');.damainObj.push('fgtj0x');.damainObj.push('vby2x8');.damainObj.push('xew7ry');.damainObj.push('pxz90h');.damainObj.push('bm3zt2');.damainObj.push('h4kwem');.damainObj.push('kj80nh');.damainObj.push('nnj2ux');.damainObj.push('fjans7');.damainObj.push('mxnn4d');.damainObj.push('i222s6');.damainObj.push('ztld8c');.damainObj.push('rxv3kc');.damainObj.push('p17lvf');.damainObj.push('1kcxfo');.damainObj.push('43n4tv');.damainObj.push('ufl0jt');.damainObj.push('5ag23n');.damainObj.push('0kars5');.damainObj.push('nirqpw');.damainObj.push('xkxgkf');.damainObj.push('33h04n');

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.245911680799567
Encrypted:	false
SSDEEP:	6:51b91dhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bjd513QvuHnmVZkGdDJH10D+xc15C5
MD5:	80716DA8EC68018F1E72C8A3F988CEBE
SHA1:	92E5D24B78C510AE95016A3D14EED0D16EADF937
SHA-256:	3C9E4427CFB92420BC98CBC0FA9113A318EF3BA0DD0CF165C60C5CA4125168EB
SHA-512:	0E49D4535BD5121634714FD28709EAA2A90ED01AA8F696A796CAC266E474EDC794D7C3B63E539DF6E1848F3570EE84CF3507A843E89652544622C0461CC41526
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w
Preview:	_HST_cntval="#3Vis. today=5076";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	dropped
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 68, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	64412
Entropy (8bit):	7.011699347640702
Encrypted:	false
SSDEEP:	768:769QriyUwOScOS/uerJRFVow295K/s+3eLLeYewVPY2XmsX5n8mCC0:76CrxYQStJBs+3WCCz5CC0
MD5:	E53429337764D276C6D4843A503CDA5B
SHA1:	A82EB9FC74FF1AF10094F9F9C9FEE6412AA12B3B
SHA-256:	3EA194A922C5AEEB5ACBCB2D786D518877D73D6BE7E11A4F7EBE4E2DE263B73E
SHA-512:	BD2A1DADD94661BB3D386C917D50D05061A9FAFA26179881078713238240F86DEA6F8DD34698FFDD3FBEB2608F9B0F03FA256524A3D1D35F317D42C46B7A8413
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/YouMayAlsoLike.png
Preview:	.PNG........IHDR.......D.....V,lE....pHYs...#...#.x.?v...XiCCPPhotoshop ICC profile..x.yi8U........1O.<E.,..2....1;q..hPI4.....B.)..RJ.R.h$R....~....s].z....}.....>.... )F...A..b.l...5.? .J...p........g...........L=....W......;..e$...w...M... ..p.z...@x.....ql..w........d.../.R.@.Y......... ....i4V8..;.P...l..8.. 34..@..@4.G.B.$n...............y..+g..4Z._..... .F&...6.....$..!....,GO... ....=....if..v..A..Nd(...<"..g.?FO.......Bi... ...$F.X-..4..".]..v.^.CX.<..I...Ky2#.N..S..;.?..H{'...@/.Dx.-.Do&E....^..aB...R.....8.DO..P.@....=.9.Xl..0-:......0Kv...b,..H.w..!.ak....e0}..a.8...RlF\....;.q.\.3V....'....4s.M.m...~l.......l.....T...........t..h..p`....'..h..&...R.30......,`@.0a./.x.0...............n.....9n....n.'.....hKt$.................1..D`....z.'........0Hx....X....>2../.Tp.AH\...B..#.8.2......n......%@...p+..7..q..R..W.?..w=.0...%.W.W.IE..;c...,6.1.P....fb..%..k.:.f....5....Z...x......V...0!.b ..G.......S......H.`3....6..6.".#.T......I.ZF...1...........

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.797902689682948
Encrypted:	false
SSDEEP:	3:5gd9q+aKth11GZKk:iV7MZ/
MD5:	EC619B436819AC2526B75A99EEBDCF56
SHA1:	210B5C720749D4547DC0149072A9199BDB0645E8
SHA-256:	FC9AB1325E67CBBCC2EE9CA11B7E775AC9B6CD2A43057CBF0CA19AC432784D10
SHA-512:	DC40C2E3A724D4D704ED92A29186432790F82BE532958B8FB972E0AE38B0EBD1DD41F3909EC7CC3C6C702DF1B83EFA9BC522B8035EF31ED2233345F435A75371
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkTBBkeU3BqthIFDQ5ATHMSBQ2i_z4NEhAJyPgzk2t-kNYSBQ0OQExzEhAJ0W1P3Il5RrQSBQ2i_z4N?alt=proto
Preview:	ChIKBw0OQExzGgAKBw2i/z4NGgAKCQoHDQ5ATHMaAAoJCgcNov8+DRoA

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/jquery@2.2.4/dist/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9217
Entropy (8bit):	4.536783204455884
Encrypted:	false
SSDEEP:	192:hOBFZqya/uyGnI2JF0Ajj5dxclYtW/l2favrwgyLXc8ChXQrIydpyZ3nFyghew6V:hOBFPhjnwAxUn8MANdAaw62tG
MD5:	75A3274361E8BCECBFD49305DD0728DB
SHA1:	A21E0FD0996B89C687F21279E85254CC73E13502
SHA-256:	E0B29FD00291571A4A9B8BC7E19648A7BFF962F594FA9D788B6157C78567454A
SHA-512:	A663969F016F7E67764D4F97765E59A4F48B49A3AC7D26F76F54C7C5C1616690F905EE435C359ED0B0858CC5C520526C8DD03BA9570048F872960FE14473AD98
Malicious:	false
Reputation:	low
Preview:	(function() {. 'use strict';. var extend = function() {. var args, target, i, object, property;. args = Array.prototype.slice.call(arguments);. target = args.shift() \|\| {};. for (i in args) {. object = args[i];. for (property in object) {. if (object.hasOwnProperty(property)) {. if (typeof object[property] === 'object') {. target[property] = extend(target[property], object[property]);. } else {. target[property] = object[property];. }. }. }. }. return target;. },. getComputedStyle = function(el, pseudo) {. return function(prop) {. if (window.getComputedStyle) {. return window.getComputedStyle(el, pseudo)[prop];. } else {. return el.currentStyle[prop];. }. };. },. offsetParent = function(el) {. if (el.nodeName !== 'HTML' && getComputedStyle(el)('position') === 'static') {. return offsetP

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18092)
Category:	downloaded
Size (bytes):	37190
Entropy (8bit):	5.323734826163063
Encrypted:	false
SSDEEP:	768:0ndwsMHDMOGtpCvFzZB2qbFH0tnklp8aInVS/dpKTs7rQGr2x:DDnDMnEpB/7r2x
MD5:	8BBFCB562A0BAA40486F0990AEF461F7
SHA1:	E3D97D6450CD3EC7C33AC2FADDC94386F429D5B1
SHA-256:	499D827248FA4D92476F7F7048B3FBBEF2B8B6D34AD60B3B88D8A051ACAB30A7
SHA-512:	94E9B35EA98ED48448A6E3808EB8A599623CB9E848ED004AE670B7E59DCB77B08E0EB21A40A31B4CB0E5DAAA0851E9EEE653943103037B93400ED37CC67BAA5E
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@webtor/p2p-media-loader-hlsjs@0.6.2/build/p2p-media-loader-hlsjs.min.js
Preview:	require=function t(e,s,i){function r(a,o){if(!s[a]){if(!e[a]){var u="function"==typeof require&&require;if(!o&&u)return u(a,!0);if(n)return n(a,!0);var l=new Error("Cannot find module '"+a+"'");throw l.code="MODULE_NOT_FOUND",l}var g=s[a]={exports:{}};e[a][0].call(g.exports,(function(t){return r(e[a][1][t]\|\|t)}),g,g.exports,t,e,s,i)}return s[a].exports}for(var n="function"==typeof require&&require,a=0;a<i.length;a++)r(i[a]);return r}({1:[function(t,e,s){"use strict";var i=this&&this.__createBinding\|\|(Object.create?function(t,e,s,i){void 0===i&&(i=s),Object.defineProperty(t,i,{enumerable:!0,get:function(){return e[s]}})}:function(t,e,s,i){void 0===i&&(i=s),t[i]=e[s]}),r=this&&this.__setModuleDefault\|\|(Object.create?function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}:function(t,e){t.default=e}),n=this&&this.__importStar\|\|function(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var s in t)"default"!==s&&Object.prototype.hasOwnProperty.call(t,s)&&i(e,t,s);retur

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	228209
Entropy (8bit):	5.545023823310553
Encrypted:	false
SSDEEP:	3072:WMFitgcnsmIjd+D0uemYasxzuZ1IwPcRCrhl+Phka0Mf3/M9fmCVM1:dYnsmQ6Z1HcRCrjFa0Mf3/M9O
MD5:	86DC789BFE936D3B439FA1D6E1447C31
SHA1:	5125A943300A53EE3BFE553CC16F33316EABA9D0
SHA-256:	8715BEEDA63956FBDF15A5624A4933004A6EE878B304C9DEDFD54036B23B6E08
SHA-512:	6492ECFE51D6D5EB6B04B183D4CE53D99168A6904879957A9A15B3C1058A5CB4A6FE193788046C5A682290CE222D04A38081B9DD29E8C157E59FC95D3A041F13
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-153655914-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-153655914-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-NHEWQEEJWW"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-153655914-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (658)
Category:	downloaded
Size (bytes):	4606
Entropy (8bit):	4.956013938426482
Encrypted:	false
SSDEEP:	96:UUhc+U52WtexmK9h7vNzPC2uSnzlCI0uozYEDNDafwyIv:Dck4eP7VDC6lCPu4l2m
MD5:	647D31AD451F6506D5F2DA9AFEE99E0E
SHA1:	9431F124A1BA710B57A2D0E312A5C0C0ECC2EAEB
SHA-256:	388E3604EF2D79C17AEB0F0374F7533AE6CFE8A26D2D4F09DB1235757F321FA1
SHA-512:	318CDA839C339B3B11B841AC1E600E6015ED63F1A594604A44C4528735BF89ADA955E66A464EEAE3E45DB712A7674E54A1F884A8C4A4631C3E7E2F38F3F4F294
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/pip/pip.js?115
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){.(function (global){.'use strict';.var video;.var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor.configurable = true; if ('value' in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9217
Entropy (8bit):	4.536783204455884
Encrypted:	false
SSDEEP:	192:hOBFZqya/uyGnI2JF0Ajj5dxclYtW/l2favrwgyLXc8ChXQrIydpyZ3nFyghew6V:hOBFPhjnwAxUn8MANdAaw62tG
MD5:	75A3274361E8BCECBFD49305DD0728DB
SHA1:	A21E0FD0996B89C687F21279E85254CC73E13502
SHA-256:	E0B29FD00291571A4A9B8BC7E19648A7BFF962F594FA9D788B6157C78567454A
SHA-512:	A663969F016F7E67764D4F97765E59A4F48B49A3AC7D26F76F54C7C5C1616690F905EE435C359ED0B0858CC5C520526C8DD03BA9570048F872960FE14473AD98
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@hola.org/videojs-thumbnails@0.1.1-11/videojs.thumbnails.js
Preview:	(function() {. 'use strict';. var extend = function() {. var args, target, i, object, property;. args = Array.prototype.slice.call(arguments);. target = args.shift() \|\| {};. for (i in args) {. object = args[i];. for (property in object) {. if (object.hasOwnProperty(property)) {. if (typeof object[property] === 'object') {. target[property] = extend(target[property], object[property]);. } else {. target[property] = object[property];. }. }. }. }. return target;. },. getComputedStyle = function(el, pseudo) {. return function(prop) {. if (window.getComputedStyle) {. return window.getComputedStyle(el, pseudo)[prop];. } else {. return el.currentStyle[prop];. }. };. },. offsetParent = function(el) {. if (el.nodeName !== 'HTML' && getComputedStyle(el)('position') === 'static') {. return offsetP

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4029
Entropy (8bit):	4.904681583448643
Encrypted:	false
SSDEEP:	48:XAbWCE6qc9EOyy02o/NGa618SMsF2moAhvlcENj7AhvlcEcTMSAZXFc4O3d7Swz+:Ht6q20RYedmF0D08EXk
MD5:	F7F2C6388FC70E3C1B01EBB41EE9AE32
SHA1:	D85E0FB50929E54CE8B910986C269A047BE3B430
SHA-256:	3B583BCF5CBB2123FD7BAF7C2E08DFF3CBA618DDC419953D1340FD4CC89970C1
SHA-512:	9EE58998836F129DAA563C1932B33E4F0EB58539FDDE76139B39F472961020F6D1732DB2F98C1C292DB1D30D6E123DE84BA146B20C6B4602112CCE07DDD27442
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/custom.css?v=1.1
Preview:	.error-block{display:none;color:red;}..jw-skin-seven .jw-overlay .jw-playlist-container{width:400px;left:-20%;}..jwplayer .jw-playlist{height:250px;}..jwplayer .jw-playlist .jw-option{padding:0 15px;margin:auto;text-align:left;}..jw-playlist .jw-name{width:30em !important;}.#content-embed iframe{width:100% !important;height:500px !important;}..bp-btn-like.active i{color:#79C142;}..qtip{max-width:320px;}..qtip .qtip-content{font-size:12px;padding:12px;overflow:visible}..qtip .qtip-content .f-desc{line-height:1.3em !important;font-size:12px !important;}..qtip .qtip-title{margin-right:60px;background:#fff;color:#71B43E;font-size:16px;font-weight:600;padding:10px 12px;line-height:normal;}..qtip .qtip-titlebar{background:none !important;padding:0 !important;}..jtip-quality{top:-30px;right:12px;}.#media-player{position:relative;}..loading-film{position:absolute;top:0;right:0;bottom:0;left:50%;color:#fff;width:200px;text-align:center;height:180px;margin-left:-100px;top:50%;margin-top:-90px;}.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	8341
Entropy (8bit):	5.174136977390516
Encrypted:	false
SSDEEP:	192:JuI1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLan55TFkY0yW/GaKdgH:TUIxSymDAZJFDfRLanXTO3ll7
MD5:	6FEAA560199413894E1F4219CA84E739
SHA1:	7E11EFC4436E0F51B49DC51912B649BF65092156
SHA-256:	7E1D423CE7CB37CFF227C59096519B58D73AE0168BA7AD7AAB28E03C85CC7967
SHA-512:	A3F820A05B830C6E680204DB0B27AF8DC317ED3A710B697EA47AD3884FF19CB74C89C3265B351AFB67355BDE01F6F1EC9AF9266A04B97F9B1328810F15C99003
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&j=https%3A%2F%2Falluc.co%2F
Preview:	(function() {. var dc = {};. var gu = "51A0173443272670518C9622FCF8D1A8";. var su = "51A017344327324DB6125BB291FA4BB0";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3993)
Category:	dropped
Size (bytes):	4105
Entropy (8bit):	5.16702871187809
Encrypted:	false
SSDEEP:	96:HPPSKq1jsmarHXEeTiuTCOJl+ejbdLu7SSO6wuffX3iV:HTuTsHD/1dsSfk3X3K
MD5:	73859074997BF9500CF463A04D083504
SHA1:	AF7CC9E2A51F25EFC47651A9364B45D6FDADF9CA
SHA-256:	D13C9570755AD2DDF9E26FF48D9C3C9209C93112A7F5D67FBC85BB668386AB4E
SHA-512:	47D8825BB59732D41569B0756EBA35D3158707B61CD814A6EF8290CFD7AF1D3D98C758522C7022CF524729E3901D8FA51BD22422C3056BFBC31FA1B600E14320
Malicious:	false
Reputation:	low
Preview:	/*. videojs-mobile-ui. * @version 0.4.1. * @copyright 2018 mister-ben <git@misterben.me>. * @license MIT. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t(require("video.js"),require("global/window")):"function"==typeof define&&define.amd?define(["video.js","global/window"],t):e.videojsMobileUi=t(e.videojs,e.window)}(this,function(e,t){"use strict";e=e&&e.hasOwnProperty("default")?e.default:e,t=t&&t.hasOwnProperty("default")?t.default:t;var n=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},o=function(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t},i=e.getComponent("Component"),r=e.dom\|\|e,a=function(e){function i(t,r){n(this,i);var a=o(this,e.call(this,t,r));return a.seekSeconds=r.seekSeconds,a.tapTimeout=r.tapTimeout,a.addChild("playToggle",{}),t.on(["playing","userinactive"],function(e){a.removeC

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	18607
Entropy (8bit):	7.971518096387488
Encrypted:	false
SSDEEP:	384:5bPtkcMoUUTwI/cm5BspZOAK4MW4qnCpbv377cgSIh51ed:5rtkcY/I0mfmOZRpj377cgxMd
MD5:	D8AA249A66974CE71D09403E5EF1C00D
SHA1:	DC55240AD821D92D99E021FA683403F0AB1A361F
SHA-256:	0D21EC85A3815C9F4001AAC025105E736550AD8EC699EE91D7961B8CC6FEF814
SHA-512:	CD0BE2849AA83DE7BA91F62FCF25010CB7412BB3C9C06BC2184E8919CAE15CF52244FF35D867460ECB56539E3620A675413C6EB06CEC9DDDEB4EE4CB182B4BD0
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................$ $.5--5@99@QMQjj..............................................$ $.5--5@99@QMQjj.......J...."..........4.................................................................w,.p..<0.p......!8..x..T...5..$..!.,.T.[...8.."`K...q.!...xD..0.7H.....K.10.`...S...N9D..;.m.U.faH.p.!.fjk.......!.=..Q.(.z.D..&Q....p.R....X......dJ{.M..y...D.b..a....h...Tcl.U..Q.....J....,v)j?A.n....=...'.:.AF.>.MR8...7J.aZ...a..J...mh./.~./...O..7rs4..[.{S.W..u./q.i......\|..\|\|.p..^.Zw..p..T...l....Y.d..7z.Y...6.uAN....*q.H.......)..S._eR..y.U=.........8-H.Z....j,I.{...N.JGU..^......Fj.K...3...y.g...Z..E.\.].[m.\..Wik.x.,.EsM..'M..[g.g.e"..R.A..7......7z.t.i.jM.+.?+:...>;.4S.....d.:.._....h...z....zg7...Z......B.......25.o5....B......M..H..'..j..X.H.uX...pn.z.....6f......p...`.)...J.h.R....KC.w...p.q..7eH2....<d..........9...fC.hY......./.u..0\|i.:f.yT.......(.2)1.Xn.k......,..N...4.T~.dy<.+.x....f...']g:gK.fV.E

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3679)
Category:	dropped
Size (bytes):	159287
Entropy (8bit):	5.597059311642482
Encrypted:	false
SSDEEP:	3072:Dk0LnA+PehJg8VX0TSFbo3FqpPeIQ2jSuaJBtQT1WJrq+Cs7lTj/EUHojiug7wXf:Dk0LnA+Pefg8VX0TSFbo3Fw2IQ2hs7Q7
MD5:	3AC274F702C8480CE3D90CDA48BE1B23
SHA1:	F4F25F42FF29A1387AF656E3B0CEA8B4BAB53711
SHA-256:	978EE569CE8FA707E0CC7EC356A9CD859E676B7850167F5E2F478ED6168FBD21
SHA-512:	D85D3BD287F343CB1CC0B6F11FE31A92951E0BF08C86EB8E42AE8C993569816BC2D5DCD70159A2B328F686268E6EF533D118E9010964B2D49BC3A4E4FEC0B5E5
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/a/t_.htm?ver=1.1620.860&cid=c026&cls=sync
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1645)
Category:	downloaded
Size (bytes):	14733
Entropy (8bit):	5.253227086206938
Encrypted:	false
SSDEEP:	96:CrB5Ax3Qs2L9FmZlC6iCmSmhyimSIAaAfl5VBV3wVv+6/GDdhC2on/7/a/PcpVMe:CVqx3gaIItAfl5VBV3wrTyQVARB70Ge
MD5:	529BB2914023FF95214EFE9282E64B1F
SHA1:	6F63FC1C64D8508A396B6C04207970D8174729D9
SHA-256:	3E51341243F97B046A2FA185190298C1C029E345E3E391AB6A46FE1FE65453C7
SHA-512:	0DC1E2BD6B23ACF1E18EE1710FD62D1652B3666BFB2DF7A8ECCD74F83F1FF3883EDC2B1512B75AF3FDFE9292607AA212EF176C55229B9F97E3292931CB6A2D98
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/slide.css
Preview:	.swiper-container{margin:0 auto;position:relative;overflow:hidden;z-index:1;}..swiper-container-no-flexbox .swiper-slide{float:left;}..swiper-container-vertical > .swiper-wrapper{-webkit-box-orient:vertical;-moz-box-orient:vertical;-ms-flex-direction:column;-webkit-flex-direction:column;flex-direction:column;}..swiper-wrapper{position:relative;width:100%;height:100%;z-index:1;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;-webkit-transform-style:preserve-3d;-moz-transform-style:preserve-3d;-ms-transform-style:preserve-3d;transform-style:preserve-3d;-webkit-transition-property:-webkit-transform;-moz-transition-property:-moz-transform;-o-transition-property:-o-transform;-ms-transition-property:-ms-transform;transition-property:transform;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;}..swiper-container-android .swiper-slide,..swiper-wrapper{-webkit-transform:translate3d(0px, 0, 0);-moz-transform:translate3d(0p

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	16145
Entropy (8bit):	7.967724659261608
Encrypted:	false
SSDEEP:	384:Ww3PkOkFOgd8pvzjn0lH+/wE4bYXzg1A/s//VepnAUCzKj8:Wub1vzLtlY1RV5UUm8
MD5:	20F918BF5CEBB2809D48BF278B87C156
SHA1:	BDF51C30B54766BCE3B7966DFEFF14F866F9B728
SHA-256:	E01BE3F31470F2CC76E4BA914EF6125A16BCFD510825E77A4300404C54726BFE
SHA-512:	A9D3D35546CC676E1B6320998F6AC28FA9AD0C8068D254B337EDA600422C2C537CF3EE897B71130F938149F9EDDE93B6E62EB508274C7A57099165C88C755900
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......J...."..........6...................................................................d..I$.I$.I$.I$.I{.$.M..q;.g.D.,...vKG...)...+.^J../..RI$.I$.I$.I$...'$.\.:..G.=....`=..>t...s.~.^{i....I$.I$.I$.I$.K..J0.x.3..]-]snem.P2D...?#&.@....H...U?.".$.I$.I$.I/.^........`.18.y..s...3!9*..V...J.+;..@..}......f]..#.U...d...M^.Y.j!.qC....}..^$.K.R ...G>(.J.m....s..B..5...^....o...t.f.Xj....,.U.3^O..K.wu.>......l.....$..R.x..'/.-3....m...G.W.6...ZA._.......N.k.@.>y..v].J....n..y.&6.........}H..v#-.dSf.m}.....i3....m(b...M.td.N.x.F.0...:.nj.7..dU.2).{..P...U.wV>...K.m:6.eG..)........):.;....`....:..eK..I.Q[eVG]d....d:..-1......E"....t........Z$a.u.yGY8.B.M..@z.2Rn}w.!Al1..[.9.(/..2.......Q;.p2.../Y.!.>.0...F16BC.6...[.........^eb..dvY..F...I....[J..0....>.../Hr.....h..[....y{".kF..k...1qll..{ H....F'.k....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	401399
Entropy (8bit):	5.40073300730971
Encrypted:	false
SSDEEP:	6144:TQt9tuU2hhOP4GJoyR8TRvZP3cZuqexxP4Brbm:TVmQ3ouqexu0
MD5:	9CFAA35AFB2F7B51C5F72FA62AA47FD1
SHA1:	C790C3A479CA92F724C3E1165DA52A24F0D5122E
SHA-256:	DD5D3CB987770270B6BBA1906691573DBAA61D0E6839AE010E8A3A45910BD255
SHA-512:	22DA7115D5654D06213B89CA20EA73C06D553CDC92A6F989CAF044E9E85DCA40DC3910215B89F2E8A2A61781FB6B2DEC7337016B0A4AD2FB7B52F3BC4DEAC08D
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.hlsSourceHandler=e():t.hlsSourceHandler=e()}(window,function(){return r=[function(t,e,r){"use strict";r=r(1);"undefined"!=typeof window&&window.videojs&&(r.registerConfigPlugin(window.videojs),r.registerSourceHandler(window.videojs)),t.exports={register:r.registerSourceHandler,Hlsjs:r.Hlsjs}},function(t,e,r){"use strict";var _="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},w=r(2);function i(t){var e=this;t&&(e.srOptions_\|\|(e.srOptions_={}),e.srOptions_.hlsjsConfig\|\|(e.srOptions_.hlsjsConfig=t.hlsjsConfig),e.srOptions_.captionConfig\|\|(e.srOptions_.captionConfig=t.captionConfig))}t.exports={registerSourceHandler:function(I){var t,C={};function r(e,n){n.name_="StreamrootH

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&ttd_puid=43e7a474-a419-4060-8143-88849fca883d%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	37227
Entropy (8bit):	7.984586419134535
Encrypted:	false
SSDEEP:	768:9K+X6/t+PGENAL7cLcLMIzAeXtPiheUWTTJTV9pL/Y+FbVZr7Gdxx1HT2Qre:89/t++uAL7XketJlL/jv4UQre
MD5:	AE390520E13F115A287966362C0FDD07
SHA1:	BC23CDAEC1957011953C03587045B64B2A77C5D9
SHA-256:	3CC7522DE1AE6537F0DAF54B31F19ABDF31FBE5A8E79AA78820F0173A32EBE04
SHA-512:	4079342175C020842D1E5A00A98AF69FFBDCCD2F50F95449FF69271B6CB57512CB8A467011B15B485E6D9D42AC576511A69348899D83A7D3B60D52DE89B33147
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................J.....................................................................................$ws.\\|.....W...b...t.H4..-%J.. ...t.X{..H.\.[....D..h......t\|.....A...t..X.}.bDvgG.H.R...B.c..<C%...=.sm&..U...%}.E.V..Cq...;...,M^.H.GA.w;..^Zm.+R..^.w.Eh.....G^.".i...$.$.Y.1...s......._.P.jm.%._P.O."..'9..-5.-..1..Wn:8U.\...&.w...].<.J....to.;..Z?;.\|..E...L..SQ....i.z...\.+X...+^V...n..Z6Yv....m@.......>..D....V+W<..]Dx.b.v.[...bg.3&:..qN.TL.p..x...a...=.J.bu`...e.s.{.pv.ls......)7!AQ6..a.. y...D.:.c...8w..<).3.y..(.V.."nY.ML....h_=n.jVL...6....k4.0.....)...10E]~h....Wv....`..C...4.se}o"C...(]H.'....e....9.......&...+\........t~E.....<w..)\.$....\|.1=......=feV.....0.b..@[...%..Yr.........e..[.r-@U.b.J..n.w;.;[..l.s6..K,.e..L?...f..oC!...h..F(..Q&.+..B!^...p.I...n<?~.(........J.}....m.%1O.`.6...xw.....n.Y

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19927), with no line terminators
Category:	downloaded
Size (bytes):	19927
Entropy (8bit):	5.680495692183685
Encrypted:	false
SSDEEP:	384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ
MD5:	517B55D3688CE9EF1085A3D9632BCB97
SHA1:	2D06C1F823F34C19981C6AE0B0EB0F5861C5E14B
SHA-256:	C541EF06327885A8415BCA8DF6071E14189B4855336DEF4F36DB54BDE8484F36
SHA-512:	08D80845E706A3B9E985B799D3849CD7791AD3BA5AA9D793BB4591D4833890D7299810144874905F416C94D8530DA74BE0EE520066A91ADE05A1DA8BF0CCB498
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/qrcodejs@1.0.0/qrcode.min.js
Preview:	var QRCode;!function(){function a(a){this.mode=c.MODE_8BIT_BYTE,this.data=a,this.parsedData=[];for(var b=[],d=0,e=this.data.length;e>d;d++){var f=this.data.charCodeAt(d);f>65536?(b[0]=240\|(1835008&f)>>>18,b[1]=128\|(258048&f)>>>12,b[2]=128\|(4032&f)>>>6,b[3]=128\|63&f):f>2048?(b[0]=224\|(61440&f)>>>12,b[1]=128\|(4032&f)>>>6,b[2]=128\|63&f):f>128?(b[0]=192\|(1984&f)>>>6,b[1]=128\|63&f):b[0]=f,this.parsedData=this.parsedData.concat(b)}this.parsedData.length!=this.data.length&&(this.parsedData.unshift(191),this.parsedData.unshift(187),this.parsedData.unshift(239))}function b(a,b){this.typeNumber=a,this.errorCorrectLevel=b,this.modules=null,this.moduleCount=0,this.dataCache=null,this.dataList=[]}function i(a,b){if(void 0==a.length)throw new Error(a.length+"/"+b);for(var c=0;c<a.length&&0==a[c];)c++;this.num=new Array(a.length-c+b);for(var d=0;d<a.length-c;d++)this.num[d]=a[d+c]}function j(a,b){this.totalCount=a,this.dataCount=b}function k(){this.buffer=[],this.length=0}function m(){return"undefine

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	401399
Entropy (8bit):	5.40073300730971
Encrypted:	false
SSDEEP:	6144:TQt9tuU2hhOP4GJoyR8TRvZP3cZuqexxP4Brbm:TVmQ3ouqexu0
MD5:	9CFAA35AFB2F7B51C5F72FA62AA47FD1
SHA1:	C790C3A479CA92F724C3E1165DA52A24F0D5122E
SHA-256:	DD5D3CB987770270B6BBA1906691573DBAA61D0E6839AE010E8A3A45910BD255
SHA-512:	22DA7115D5654D06213B89CA20EA73C06D553CDC92A6F989CAF044E9E85DCA40DC3910215B89F2E8A2A61781FB6B2DEC7337016B0A4AD2FB7B52F3BC4DEAC08D
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/videojs-hlsjs-plugin.1.3.5.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.hlsSourceHandler=e():t.hlsSourceHandler=e()}(window,function(){return r=[function(t,e,r){"use strict";r=r(1);"undefined"!=typeof window&&window.videojs&&(r.registerConfigPlugin(window.videojs),r.registerSourceHandler(window.videojs)),t.exports={register:r.registerSourceHandler,Hlsjs:r.Hlsjs}},function(t,e,r){"use strict";var _="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},w=r(2);function i(t){var e=this;t&&(e.srOptions_\|\|(e.srOptions_={}),e.srOptions_.hlsjsConfig\|\|(e.srOptions_.hlsjsConfig=t.hlsjsConfig),e.srOptions_.captionConfig\|\|(e.srOptions_.captionConfig=t.captionConfig))}t.exports={registerSourceHandler:function(I){var t,C={};function r(e,n){n.name_="StreamrootH

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3679)
Category:	downloaded
Size (bytes):	159281
Entropy (8bit):	5.596890744819232
Encrypted:	false
SSDEEP:	3072:Dk0LnA+PehJg8VX0TSFbo3FqpPeIQ2jSuaJBtQT1WJrq+Cs7lTj/EUHojiug7wX+:Dk0LnA+Pefg8VX0TSFbo3Fw2IQ2hs7Qa
MD5:	E7D39F58764721341FF030D18F77C4FA
SHA1:	71CB18116835331DC76D122FD8B794F625CAD304
SHA-256:	9DE441BB23B7785DB245D3CC3968C1293DA5DEC95547930435F184C1ACC27A2A
SHA-512:	E492EFA74577D4CABBC7BE39DFEE8138F40BAE6203C06B0A785D0B78CFD19E4B0870A0400811F22751B26018175488828E8DA330AD173EA103A97DA67B5AC102
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	21231
Entropy (8bit):	7.976284971547099
Encrypted:	false
SSDEEP:	384:85bfwZRSqODhAMSpFGKWsh6H/f8Rep2bwMP10enLH+y/H2jSsbAVl9:zjw1CPWsIH38Rep2TP5HH/H2jZbCH
MD5:	80F6F0372BCF2CFF4CE7FEBE9420E5F6
SHA1:	A5D682CE8905E8CDBA8A6F8BB7C7265450E3C712
SHA-256:	085588A5FBC69259CEAC3D46A0C8D5FC270744876FF5DF0B7DF6443131EB16F9
SHA-512:	47DC62AABCC2AA1026B390961C2803A80EFF4608734C92897088774BDB0179E678DDDC70A59F4C0DD657512996DAB7AFF8ECE9C3BEFC1842165C4032CE7DA7C3
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12328215740-poster-The-Undeserving.jpg
Preview:	......JFIF.............C....................................!$..( ..%2%(,-/0/.#484.7./....C.......................................................................J.....................................................................................w.#L ....f:.....u......kF%...sY..&. ..)...!.6 ..T...b:.....Vv....:<^k/A.........]z..<..u.\|.8..<.....#...V...2.\|/N..VS:..v.H/......>...>....C....XvU....}+..6OO......]>(/.<}E..nj...5d..;....I{-H.Z.Q.s>.'...cV.6...`.S.U]9h..n..#..s..x.u..2.p6..............I;\og..a. E....n.`+....Pk&#G"..=2..N......S..#...]......#XH\|.g....5,.wZ3....w.-w...}.~.>...3t......7......Z..Xz......Z.b7b:EYY....7...\|...s.v&...5.T.^N.Qh.?.....6....0.../.....bzg...z....F...Ex.M.p>.....t.o....k..T(..[e..K.....g.M..is../........Er.{t....4/..r.{xzN~..w..5jL......z<.}.."...jw.z._K.ro........>u....cy..zO!....~^..^.-@.h.=...i:.l......[Xo.W-.L.H+...O.}../L.]q].zu..?Kq.............9..SF.(.B.fk......`^W..Zj...z2..o .WUY<2+r6...o

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.7504733810175
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikXNKr4GfwY:IgymGfkY4GfwY
MD5:	79BE7F1A347233634689581FADB7E5BF
SHA1:	0122C08E1CEC98A27E7734F22F581E117B459F40
SHA-256:	D51CE66B496388F21BBB21C645854756D6AC6BAAA3BB2C9A44BF9F63BD4FC6B7
SHA-512:	17742F2D34B09CC155AE9E457B6AC168F0B1DE7D68B44D599F0EB440CF46CAC937D3DFA0AC9CA599B9E8277E2820D4E4025D6F84AE6D6FFD6F972884A98ABBFB
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c
Preview:	try{_dtspv.c({"b":"chrome@117"},'128n');}catch(e){}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	dropped
Size (bytes):	3456
Entropy (8bit):	4.974973898780113
Encrypted:	false
SSDEEP:	48:kBLNN+/6BRmqO7YgPY1WLwVAUKi+HdNzT1fJv3bE63hazJ7fJIRrMMSvcCgw0IXH:uqvPIBR+jbE9JxXfXu0
MD5:	CC58687E068922C3C6CD915E90CE82A6
SHA1:	4560B7B212B7A3EA4DAAB7F679CFEE37E4493BF8
SHA-256:	88E33D38AA577708D4CB0230EDFDDBBC348ED7DD6AF3224797BEE28EAE0F2C7A
SHA-512:	84728824DC790BDECB41DA24E84EBEEF741557D7FE0DFA8CC803CD8204454C0D2CECA608C72B7674686F3E41A03DA75B8D0C51333920E2FCCD59EA0F3BAE12CF
Malicious:	false
Reputation:	low
Preview:	/! device.js 0.1.59 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),.device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},.device.iphone=function(){return d("iphone")},.device.ipod=function(){return d("ipod")},.device.tv=function(){return d("tv")\|\|d("crkey")},.device.ps=function(){return d("playstation")},.device.xbox=function(){return d("xbox")},.device.ipad=function(){return d("ipad")},.device.android=function(){return d("android")},.device.androidPhone=function(){return device.android()&&d("mobile")},.device.androidTablet=function(){return device.android()&&!d("mobile")},.device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},.device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},.device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},.device.windows=function(){return d("windows")},.device.mac=funct

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (658)
Category:	dropped
Size (bytes):	4606
Entropy (8bit):	4.956013938426482
Encrypted:	false
SSDEEP:	96:UUhc+U52WtexmK9h7vNzPC2uSnzlCI0uozYEDNDafwyIv:Dck4eP7VDC6lCPu4l2m
MD5:	647D31AD451F6506D5F2DA9AFEE99E0E
SHA1:	9431F124A1BA710B57A2D0E312A5C0C0ECC2EAEB
SHA-256:	388E3604EF2D79C17AEB0F0374F7533AE6CFE8A26D2D4F09DB1235757F321FA1
SHA-512:	318CDA839C339B3B11B841AC1E600E6015ED63F1A594604A44C4528735BF89ADA955E66A464EEAE3E45DB712A7674E54A1F884A8C4A4631C3E7E2F38F3F4F294
Malicious:	false
Reputation:	low
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){.(function (global){.'use strict';.var video;.var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor.configurable = true; if ('value' in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	25978
Entropy (8bit):	7.967925931729784
Encrypted:	false
SSDEEP:	768:GNDNtQeLuRqv1tEhMWto10aUp9IpgfnVb99IfnoJV:KADBh1to1q9IpgfnVbonov
MD5:	1D9D88059752F575A6B4DA6DA663DE1E
SHA1:	6539250B4596ED4D9AC927160E975997CEF901C7
SHA-256:	AD1260063E6E3CF9E762850F84C21A54ED73C9D32AC8A1562882C1FFA31191AC
SHA-512:	CE64FF915756E0FE67920804884693E670B9B60B6E6F94B7C1BA88D7009147BF4612060F48C5B9A0F7CE176D9E955E9547E424DF8FDC0FBC1A4D00AA418FED60
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""......J......................................................................................@@....A@@.AD...Q...Q.........Q.....@..............Q.........Q........Q.......A@.......%V.o....q2.......(.9..Xfg..+Mkj........3..V..j.,. .......W.....^.U.._.!t....j&..]$S...l.S..Q.....ZO..V.[.....M_.....k{<..h..vv)....]p...4......gc.Lk..2.).o3.Z=.."k.."<.5.s...."J-..+"..Z.(z...X..2D.H.or...`O<K.....&.^.....S..s2O@..DydB.%....Ukr(.VMkk.ULH......u\...[96.};E.).s.;...-.Q...o..ZEn.t..Eb....M.nF.......E.r.4Z.._..3:.......g[......7..rm$..+_k.;..........O9....<.Z.ME...9.....+...n.....^..6..r..-..L...^..M....=w...\|.U.#....?..e.....[.=Z...3..(:j.O}44..3....>.6..g.u.N........R2i.$W...W.XZh.OQDi=.{M......5.I._l..zU..1.2IEy~A0....7.K..W..t.a..1.....m.w..#...z...."z.q7..$`.....`.DY...}.....*..-c, i..y{n.y.b

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.2386619768465055
Encrypted:	false
SSDEEP:	6:51bNRhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bNR513QvuHnmVZkGdDJH10D+xc15C5
MD5:	331941DBFF0E253761006EDD592AC459
SHA1:	6EA368E1F70C70F6E4D3C7BA5D2FCE6C8B9F99D7
SHA-256:	081A4960AFE39D402267452276BCC980B22C4A803F2DAE1270DB6BFC2B064E7C
SHA-512:	3324C0D944573BCE6B1555C77C99A38AAC51EE83701721404DFE94AF2C6101C8FA0D7F9A35C6CC18DCA0759443F096148BBBAFA77F112A0CCDB34ECEB988BEE8
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/e.php?4329645&@Ab&@R58661&@w
Preview:	_HST_cntval="#3Vis. today=5081";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	downloaded
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
URL:	https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	21231
Entropy (8bit):	7.976284971547099
Encrypted:	false
SSDEEP:	384:85bfwZRSqODhAMSpFGKWsh6H/f8Rep2bwMP10enLH+y/H2jSsbAVl9:zjw1CPWsIH38Rep2TP5HH/H2jZbCH
MD5:	80F6F0372BCF2CFF4CE7FEBE9420E5F6
SHA1:	A5D682CE8905E8CDBA8A6F8BB7C7265450E3C712
SHA-256:	085588A5FBC69259CEAC3D46A0C8D5FC270744876FF5DF0B7DF6443131EB16F9
SHA-512:	47DC62AABCC2AA1026B390961C2803A80EFF4608734C92897088774BDB0179E678DDDC70A59F4C0DD657512996DAB7AFF8ECE9C3BEFC1842165C4032CE7DA7C3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................!$..( ..%2%(,-/0/.#484.7./....C.......................................................................J.....................................................................................w.#L ....f:.....u......kF%...sY..&. ..)...!.6 ..T...b:.....Vv....:<^k/A.........]z..<..u.\|.8..<.....#...V...2.\|/N..VS:..v.H/......>...>....C....XvU....}+..6OO......]>(/.<}E..nj...5d..;....I{-H.Z.Q.s>.'...cV.6...`.S.U]9h..n..#..s..x.u..2.p6..............I;\og..a. E....n.`+....Pk&#G"..=2..N......S..#...]......#XH\|.g....5,.wZ3....w.-w...}.~.>...3t......7......Z..Xz......Z.b7b:EYY....7...\|...s.v&...5.T.^N.Qh.?.....6....0.../.....bzg...z....F...Ex.M.p>.....t.o....k..T(..[e..K.....g.M..is../........Er.{t....4/..r.{xzN~..w..5jL......z<.}.."...jw.z._K.ro........>u....cy..zO!....~^..^.-@.h.=...i:.l......[Xo.W-.L.H+...O.}../L.]q].zu..?Kq.............9..SF.(.B.fk......`^W..Zj...z2..o .WUY<2+r6...o

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29325)
Category:	downloaded
Size (bytes):	29461
Entropy (8bit):	5.314605750585524
Encrypted:	false
SSDEEP:	384:6ocL5Jt24UHTLRNkqGo3snk9XDXiz2QgmRrPmiJ:bwlRUwqGu9XDXizF+W
MD5:	013916AB61482481D8DE9742A0F95BEE
SHA1:	546BB742502FAA36F8C2BB954C2F028187660404
SHA-256:	73CDEA3EA0691F9AC4150BE0C937DC2EE7EAA10205168A84E41EF5C9E05784B7
SHA-512:	1198664A5FE188AC841E49688246A41674986B9996B0B9930B865FBD5CE1A9834B3DB5CA017B2351845FD8EF4E97340DDF71F4C4155F19210851EAADF5AB2D1D
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
Preview:	// ProgressBar.js 1.1.0.// https://kimmobrunfeldt.github.io/progressbar.js.// License: MIT..!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b;b="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,b.ProgressBar=a()}}(function(){var a;return function(){function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){return e(b[g][1][a]\|\|a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}return a}()({1:[function(b,c,d){!function(b,e){"object"==typeof d&&"object"==typeof c?c.exports=e():"function"==typeof a&&a.amd?a("shifty",[],e):"object"==typeof d

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5076)
Category:	downloaded
Size (bytes):	5077
Entropy (8bit):	4.858107986487865
Encrypted:	false
SSDEEP:	96:tKJxqUaVH6LIDNDID7DEDbDwDuaDkD9Duu/DI/DaTDuKDADYDuxDnDJDuSDHDyhT:UxO1FXpggEu4U3/eZ0V
MD5:	67AEDD3568F32B6A5352BE5E4806053F
SHA1:	BFB9737EDD5F0CE26B02D8FA48752A8656007D24
SHA-256:	FEE2BC66465B17EDEBB5CDA074EB2722308E93616FCB1BD089689D8FC58C55E4
SHA-512:	53674B52BA71D81E34059C97C42495E449C72C056BCCA5E90D8CA9BD2804DC40D259EB2647AC5EBABA97805CC160E05A954E2975C55D6A2760D30966DF2BAFA4
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/share/videojs-social.css
Preview:	.vjs-social-overlay{font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:10px;letter-spacing:1px}.vjs-social-overlay .vjs-icon-facebook{background-color:#3b5998}.vjs-social-overlay .vjs-icon-gplus{background-color:#d53326}.vjs-social-overlay .vjs-icon-linkedin{background-color:#069}.vjs-social-overlay .vjs-icon-twitter{background-color:#55acee}.vjs-social-overlay .vjs-icon-tumblr{background-color:#29364b}.vjs-social-overlay .vjs-icon-pinterest{background-color:#c10218}.vjs-social-overlay a{color:#fff}.vjs-social-overlay .vjs-social-title,.vjs-social-overlay .vjs-social-description{margin:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.vjs-social-overlay .vjs-social-title{font-size:1.25em;font-weight:bold;line-height:1.33333;margin-bottom:.33333em}.vjs-social-overlay .vjs-social-description{font-size:1em;font-weight:normal;line-height:1.5;margin-bottom:1em}.vjs-social-overlay .vjs-social-share-links{margin:-.33333em 0 .66667em -.28333em;overflow:auto}.vjs-so

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	20738
Entropy (8bit):	7.968875449931961
Encrypted:	false
SSDEEP:	384:cSw8AjuSyMUggUuXxza2SMBaPdpG81hwNg3tYuUuG+ka6pV9MQYzBkP29cBe5738:xTousWHOgalpZ1hOObg999MQsB2g5xG
MD5:	9FB32883F40EE0A034DF7D59F369A945
SHA1:	505DB8B3E2657421750A0ED7F8119E783912500D
SHA-256:	A4AE5F0C6BC5B95BAF48A929CA770877169687319EBDD1FB579762EC4B0719BA
SHA-512:	F384BA00C0FEF9201BA38A62328C483F5DBB6CC7DFECDA042BBF48A6864072106D7777161F075FAFE665A70D047D255582C6149F31AFA0DEBEB58FBC956C51AB
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12315497092-poster-Don-Q.jpg
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""......J....................................................................................9........X..@... . .Y#iF..m....8.,....:l.$....N..H..!]+.F.,.4$...".&...p......h...0..f.MPY<]...g....)>..K.U.....Z4(...M.!.M0.W..Uv\|nV.L..S.{=;.3p=..S..\..S....K.......Y...}.\.j\.W............r.g...'V..B.^.>....y<.7....._9....z.~.w....uz._?...\|...v{...#^..yi.F..oW.\|.......5.....:..GR...........n..V.\.}.:.w'..+.:..^f.#...........9..0.z<.wG......y~.....).1..:.\.j.3W.,..!.3F..6._L.W.k..e..t......n.52..X.e,/...5obWh./T.^.FE;..@....<.....Ec8.z.N..wFq.6....F.Y.SB..dg.U..qp.o..v.cm.....O(....Z.^.q.tuy...U...g..'.h.%....&..7.gA...54/$....4@..!...v....\|..e.F.......l..,..5..</.V........8 ...s.x.F...r....G....K<q...J..n..%~..&bC.h..\..a(j.3rr,.+l(]E.u..f....K..S*.De..Q@....V..&..O.F.d..f......s.B.GU....o..s..Q,.4.wO...z.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7560
Entropy (8bit):	4.21252188097567
Encrypted:	false
SSDEEP:	48:ySZVLslwSGEt5Qa1vJ5javxj2avflx81EOpijCFX81a81q2avtlo81m81MCWhVtr:3vwlwSkgfsjjhOpijutEPFhTuHRu
MD5:	426E94AB739FFBA7699DC137B2969D19
SHA1:	84A01A3C6D4493D6683D5A040C29608DFFAA6D08
SHA-256:	AB27B6366307E4AE59D9F83C7A3FF9E287E99E9CED5FE74334C88ABE9625E29C
SHA-512:	BDD8EDBE16FCFC21543727FDC6E48FA235ABBF280ABB1164460EAC65D3CDE073D3DE1AFC015D9F02C4BB0B190EECB9FC9C065D10E903B5C9A449AADF211FC588
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/slider_v04.js
Preview:	/.. Author: PVT.. .. Date: 03/04/2015.. .. Plugin: Slider.. .. /..(function($) {.. var options;.. $.fn.slider = function(options) {.... var defaults = {.. data_attribute : "data-original".. };.... options = $.extend(defaults, options);.... checkRequiredValue(options);.... var self = this;.. var obj = $(this);.. obj.addClass('slider');.. obj.attr('page', 0);.. //obj.css({'overflow' : 'hidden'});.. .. var scrollTop = $(options.container).scrollTop();.... var width = obj.find('li').outerWidth(true);.. var height = obj.find('li').outerHeight(true);.. var total_length = obj.find('li').length;.. var total_w = width (total_length + 1);.... var firstchild = obj.find('li:first-child');.... var page = parseInt(obj.attr('page'));.... if((total_length%options.minSlides) == 0){.. var max_page = parseInt(total_length/options.minSlides);

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	13982
Entropy (8bit):	5.100941655750857
Encrypted:	false
SSDEEP:	192:O/A2KC3RtGFnoYcAb/XkLM17rbN5rYrWcYYgC/55wJjJUjfQFU75+xCj+8NcC+5U:mLsrqh56lUb4kolhTc
MD5:	626BE86ED51EEF8B8B4038B6DCB8FCB2
SHA1:	229B2C503C8A0ACC4BB1B423C895FC30330A0723
SHA-256:	7E5965A6EB681EF5F8A59DACD6E8C8263DCBBB512E441E532FEE942A90C4C7EA
SHA-512:	8518727AA4F483D1ABCFEBEEF69BC37562F74D2BBA0E80D211E5249A8E9D7F943FC2A755C7666E9C9590456A68A0143A9EADF6797D72914E770BDF3357CEA58E
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/adv/fuckadblock.js?2
Preview:	/.. FuckAdBlock 4.0.0-beta.3.. * Copyright (c) 2013-2015 Valentin Allaire <valentin.allaire@sitexw.fr>.. * Released under the MIT license.. * https://github.com/sitexw/FuckAdBlock.. */....(function(window, instanceName, className) {...var debug = false;...var debugName = 'FuckAdBlock';......var FabUtils = function() {....var self = this;....var options = {};........this.errors = {.....throwError: function(name, method, type) {......throw 'Argument "'+name+'" of method "'+method+'" is not an "'+type+'"';.....},.....isObject: function(value, name, method) {......if(typeof value !== 'object' \|\| Array.isArray(value) === true \|\| value === null) {.......this.throwError(name, method, 'object');......}.....},.....isArray: function(value, name, method) {......if(Array.isArray(value) === false) {.......this.throwError(name, method, 'array');......}.....},.....isFunction: function(value, name, method) {......if(typeof value !== 'function') {.......this.throwError(name, method, 'function');....

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/a/t_.htm?ver=1.1620.23405&cid=c010&cls=C
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1351)
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	5.037443985319193
Encrypted:	false
SSDEEP:	24:7Q3U52GJNLLwZuwgWKejgW10zegWVg5J2Y+ksg6:7QKNLLwUwTKwTTTV3dFV
MD5:	9FD69A27524FAF91F2C9FF5D43848C14
SHA1:	B2964181669D7A354604F4F756CA32A08F3CE749
SHA-256:	F607316EE02104F64DF1B27538B8574B06464CD3D56FE6731B60C36BFC8648D0
SHA-512:	C4148EB15404D4EF525F7E4125C76FDA034DF8DC07A3EC1AD020D5C31AE18592EB0202620923234447CAA05A5EFEA1C23CA68714922D1C867A2D82F9E834A9DC
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/player/videojs-aspect-ratio-panel.css?4
Preview:	/! @name @yangkghjh/videojs-aspect-ratio-panel @version 0.0.0 @license MIT /..vjs-resizer-modal{position:relative;z-index:1;left:0;top:0;width:100%;height:100%;overflow:hidden;background-color:transparent}.vjs-resizer-modal-content{background-color:rgba(43,51,63,.7);margin:5% auto;width:460px;max-width:100%;height:300px;max-height:100%}.vjs-resizer-modal-close{position:relative;color:#fff;float:right;font-size:28px;font-weight:lighter;right:4px}.vjs-resizer-modal-close:focus,.vjs-resizer-modal-close:hover{color:#000;text-decoration:none;cursor:pointer}.vjs-resizer-wrap{font-size:16px;line-height:200%;position:relative;width:370px;height:100%;margin:15% auto;z-index:1}.vjs-resizer-modal-title{text-align:center;padding:12px;font-size:18px}.vjs-resizer-size .size-scroll{color:#fff;width:255px;height:5px;background:#ccc;position:relative;display:inline-block}.vjs-resizer-size .size-scroll-bar{width:15px;height:15px;background:#369;position:absolute;top:-5px;left:255px;cursor:pointer;bord

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEDqOsxIRfrLl-4FWjx9P3oI&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	4.666462705033342
Encrypted:	false
SSDEEP:	12:QKPKWIYSQhv0X2eKa0X2eKWnPKiPKW3vWf0KaOf0KWnGrLKlrTt:QKPKJQ50X2eKa0X2eKuPKiPKyWsKaOs7
MD5:	06B9E3321670549D267F6F8DAAF9E789
SHA1:	E83AC4BD11E462E237A949A7E73620536BC19BEC
SHA-256:	62B4F9A15E8DCE6EAB4CBDC5E559E9E01BACABC617D047022232DF3E4B37CEB2
SHA-512:	B938D8AB68F5D55A33B82B517311847BAD3CB8403ACA9A7216EDF18182AAFDBFB065B76AF738EF5ECFAEA2D7423B855A612D3EBD4654371783E7DB341734775A
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/player/videojs.logobrand.css
Preview:	#vjs-logobrand-image,.#vjs-logobrand-image-autoHide {..transition: visibility 0.1s ease 0s, opacity 0.1s ease 0s;..visibility: hidden;.}...vjs-has-started #vjs-logobrand-image,..vjs-has-started #vjs-logobrand-image-autoHide {..visibility: visible;.}..vjs-user-inactive #vjs-logobrand-image {..visibility: visible;.}..vjs-user-inactive #vjs-logobrand-image-autoHide {..visibility: hidden;.}..vjs-user-inactive.vjs-paused #vjs-logobrand-image,..vjs-user-inactive.vjs-paused #vjs-logobrand-image-autoHide {..visibility: visible;.}..vjs-ad-playing #vjs-logobrand-image-destination {..display: none;.}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/sync?vxii_pid=5003&vxii_pdid=19a72782b558262c5c95264fea115e8f&vxii_ts=4&_t=1734432755
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (658)
Category:	dropped
Size (bytes):	4695
Entropy (8bit):	5.0373223007972
Encrypted:	false
SSDEEP:	96:UUhc+Ua2WtexmK9h7vNucm6VH4ig09luv0NeHw5ckIv:Dct4eP7VL9YiX9xm8c9
MD5:	C363465814ACB803ADF3B47F4A49297D
SHA1:	409315128194CFF682B8624022C5170F06ACF511
SHA-256:	CB5C39DFFEAAFF78C752E209FD4D034918499A56D75CEBB6F9084919E9BB6AF4
SHA-512:	2804F826CD47AA4C21172152A51E6D05B901E891E9D3CE4914B1421A71A402A8AC6353344AFB4BC85F24FA779B841D3C6677BE7F4964D7AE3A9EDFEE2B2F4E00
Malicious:	false
Reputation:	low
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){.(function (global){.'use strict';..var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor.configurable = true; if ('value' in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps); if (sta

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=7ri0rgu&uid=C3C9ACED-CFCA-4787-B7C7-77CCE2BCAA3F
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=650769d44d2769074c8410e9f916366c1b1cbadc0a96fd995b857c6f13f7cc6cf4cb09cee1a4f8eb&person_id=3649183083493064749&eid=50082
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	3456
Entropy (8bit):	4.974973898780113
Encrypted:	false
SSDEEP:	48:kBLNN+/6BRmqO7YgPY1WLwVAUKi+HdNzT1fJv3bE63hazJ7fJIRrMMSvcCgw0IXH:uqvPIBR+jbE9JxXfXu0
MD5:	CC58687E068922C3C6CD915E90CE82A6
SHA1:	4560B7B212B7A3EA4DAAB7F679CFEE37E4493BF8
SHA-256:	88E33D38AA577708D4CB0230EDFDDBBC348ED7DD6AF3224797BEE28EAE0F2C7A
SHA-512:	84728824DC790BDECB41DA24E84EBEEF741557D7FE0DFA8CC803CD8204454C0D2CECA608C72B7674686F3E41A03DA75B8D0C51333920E2FCCD59EA0F3BAE12CF
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/d_check.js?35
Preview:	/! device.js 0.1.59 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),.device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},.device.iphone=function(){return d("iphone")},.device.ipod=function(){return d("ipod")},.device.tv=function(){return d("tv")\|\|d("crkey")},.device.ps=function(){return d("playstation")},.device.xbox=function(){return d("xbox")},.device.ipad=function(){return d("ipad")},.device.android=function(){return d("android")},.device.androidPhone=function(){return device.android()&&d("mobile")},.device.androidTablet=function(){return device.android()&&!d("mobile")},.device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},.device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},.device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},.device.windows=function(){return d("windows")},.device.mac=funct

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15802), with no line terminators
Category:	downloaded
Size (bytes):	15974
Entropy (8bit):	5.4661181095325375
Encrypted:	false
SSDEEP:	384:piffPH9fjOWYxfJZV9lQ0rIM6DEaYvs/gUkDNdtXdg:sleJjzIMoEaYvHdk
MD5:	59B27A075F32F5E735AD698BE77A95D2
SHA1:	07722E7CBA7F2AD63AA529D3C26554FF732A4AB4
SHA-256:	794479E471E8EDEFB742FDDFB31A70001847EA24E0E49C35B1E1D50AA8FFC144
SHA-512:	A70001ABCC9F355FBB40F4C3B850E24A6D0A813675AFFD9F3573C0A70A7550EA5FCA2ED10448E37917BD68055040FD086A2D3C6F250BD3577AF8C68928F6C842
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/detect-file-encoding-and-language@2.3.1/umd/language-encoding.min.js
Preview:	!function(f){"object"==typeof exports&&"undefined"!=typeof module?module.exports=f():"function"==typeof define&&define.amd?define([],f):("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).languageEncoding=f()}(function(){return function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);throw(f=new Error("Cannot find module '"+i+"'")).code="MODULE_NOT_FOUND",f}c=n[i]={exports:{}},e[i][0].call(c.exports,function(r){return o(e[i][1][r]\|\|r)},c,c.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}({1:[function(require,module,exports){const byteOrderMarks=require("../config/byteOrderMarkObject.js");module.exports=uInt8Start=>{for(const element of byteOrderMarks)if(element.regex.test(uInt8Start))return element.encoding;return null}},{"../config/byteOrderMarkObject.js":6}],2:[function(require,mo

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	273580
Entropy (8bit):	5.575227638404342
Encrypted:	false
SSDEEP:	6144:UDYnsmQ8LXZ1HcRCriua0Mf3/BrfduT+boG:Unm9LX7Hc8KoG
MD5:	B6218E38B80FE74A0D38C30BBB87DF26
SHA1:	8BE3A21C5DE1962645900C8DF3DC66FB74087D6E
SHA-256:	0090A5F0528B6DBA1C9EEA976F0495D46AEE8E539A03BDE751DC319C31334E75
SHA-512:	0EF1385538E7962D4792ADB962DFB37FF987B5E2905095360661829E5C9203B2122170C1C869DE6C86F36B2E956B08DB028A112FC3765B7F6CAAF192D7599519
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-9H8DG4JWZ9&l=dataLayer&cx=c&gtm=457e4cc1za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","alluc\\.co"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","v

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	280747
Entropy (8bit):	5.5843875700845835
Encrypted:	false
SSDEEP:	6144:VUzYnsmQ8oMZ1HcRCriua0Mf3/BrfyuT+bsZG:K3m9oM7Hc89aG
MD5:	79FDC55A01E8677C154E17895898CC5F
SHA1:	34AF732E4DA5FA91A71B128412B4B02F35B9F5D4
SHA-256:	DC52F6BC22C85262EB991017D6DF9B6171B773BBD1084AF559F393334477354E
SHA-512:	575F323B49492BEA738A226E7688F9DF1F036E0FF6EB1DB93D3467EFB927C5FF12A02058137B7B68446BB1FAD8A8EFC6DD4D353F3FA92269E5B3663B5F1B9B7C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NHEWQEEJWW&l=dataLayer&cx=c&gtm=457e4cc1za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","gomostream\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	11104
Entropy (8bit):	7.964419567130439
Encrypted:	false
SSDEEP:	192:qEqLDxKJNPUu+8nM6VVG9injRq9OMhbQRgdbgMIVxrwPNS+9YaV5YwuNsIElbWST:qEYAJN6Z6/+kMhbQSuM2xruA+99o612g
MD5:	CE8B2843D207740FF1E257D35626DC31
SHA1:	A9F8296F139EBEFC945471A9DFEEE0FC84476F53
SHA-256:	59A7240F879F0FCE0D7B5F99008BC842004381FD62D7115155C6D609D0383986
SHA-512:	8B5BF198B566B002960534755C2C8CDAC929F1C59587A909A8E9C1EBF062E7AFD9087E4C86D0F557E9EE98AC94CCDAD13C6CCCD13DB7E49DC22F6A7DDB4E0FE8
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........J...."..........5....................................................................f.SK.~o.N...O..7-.....m.!...u...^..B...&F.K..=.....G\|.u...{.[.o....Gn...CN...&.....s..R..m."Z..H.W.fIJ."S..=[~..6..........61@./.I..../&MSn].w{.6.!h..s...Bq.N4T=.-9.Rku.\|....R.2.s..PU.c....M...`...f].8.<....d.....y...J..W..._%...Rf.._..QuP.NT9n..-.5v"...W.;3.."...f..G.....\|D}F.r...N.(^.J....5...lz.../%P..w...IS.N.#..Ui..-h....%..ul>...{....D~eB...z..EBV}...6...X.n..~s."<..6....u..F.Qzn..>Y2W6.......BW..i.{..fWb.O=..P.g.i8]......o..].,IA&+z.].O..a.Fzd.R.W.y.GSuhhZ...g Iu=.+.s..^?Z...I...m.{..4l....L...3l.X.p.X.)9...>..b.!K..<h..R.c...n.T.fJRz....qU..lv=.lr...A.3J....4.u.q[z.k..f.Jm..........b{&.i..ga[....s.r.f..)..".U"._..jU..;Uo..=?.J@g..0o6.e.e......M<..s.v.i.7.El..x;..".^.+..T.{..R+.c ...~c.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9716
Entropy (8bit):	4.667533449250915
Encrypted:	false
SSDEEP:	192:IOO3iojYlvQJgcxB0nTPQZbXXTXHTJ4dUzt7odNAP3pkJuO09eW8ma/AQTpGQvJN:h080v5txkl0GPLQLgFio
MD5:	EA54D2A87C6220F6963BD912B06321C6
SHA1:	2B3231FC31FFB072C51C901244AA89C5E1C4BCEF
SHA-256:	BAE0BE00456EA666920477BE254FDCF5104A179CC46135C316A70DDBEE9F8964
SHA-512:	BC234B5B46CE469975F772CAB10D81D6D27763F576B8C0CFE8158C88D412555898C716E234F8A8452FC9AE2660CB1F679C746F05FF672EE2F34ADCDE03592056
Malicious:	false
Reputation:	low
Preview:	/* eslint-disable no-console /.((window, navigator) => {. const SEC = 1000;. const MIN = SEC 60;. const HOUR = MIN * 60;. const DAY = HOUR * 24;.. const state = {. loadTime: Date.now(),. capabilities: {. beacon: false,. },. user: {},. events: [],. eventsSent: [],. timers: {. idle: null,. },. };. const config = {. debug: true,. endpoint: 'https://a.dtsan.net',. sessionIdleTime: 30 * MIN,. sessionStorageTime: 30 * DAY,. };.. // ----- HELPERS ------. function identifier() {. const str = (Math.random() + 1).toString(36).slice(2, 12);. return `${str}.${Math.floor(Date.now() / 1000)}`;. }.. function friendlyTime(elapsed) {. if (elapsed < SEC) {. return `${elapsed}ms`;. }. if (elapsed < MIN) {. return `${Math.floor(elapsed / 1000)}s`;. }. if (elapsed < HOUR) {. return `${Math.floor(elapsed / 1000 / 60)}m`;. }. return `${Math.floor(elapsed / 1000 / 60 / 60)}h`;. }.. function debugMessage(le

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2625
Entropy (8bit):	4.154285072239087
Encrypted:	false
SSDEEP:	24:faS8RXytoZsNPCJXFuzhXwFSEyYbc13FOzhXwFSEiYjc8rNAVtNZ/+e8Q3JtndrU:yS8poWEeozExOoz0hj/ZAhZ88B06Kj
MD5:	D77DEE61E71793250ADA08CBACA4A516
SHA1:	CA7CF628D5ABEF153FFC22FAE1F8178C9F158D6D
SHA-256:	F53A1D9527C62CD35624C9F2BC9A2BEB2AD909D8E7A7FB086585083327CD5136
SHA-512:	167DBE72A3615EAC20A963BCB39591CD7271E1012150EF681AEE6757775D4695454256E312C627D8F78821949720D819BDFA2125BA0DA878540AE5F3B7769270
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/lazyload.js
Preview:	/.. Author: PVT.. .. Date: 03/04/2015.. .. Plugin: Lazyload.. .. */..(function($) {.. var options;.. $.fn.lazyload = function(options) {.... var defaults = {.. event : "scroll",.. effect : "show",.. container : window,.. data_attribute : "data-original".. };.... options = $.extend(defaults, options);.... checkRequiredValue(options);.... var self = this;.. var obj = $(this);.. .. var scrollTop = $(options.container).scrollTop();.... $(options.container).bind(options.event, function() {.... var scrollTop = $(options.container).scrollTop();.. .. self.each(function(i, object) {.... var item = $(object);.. var top = item.offset().top;.. var left = item.offset().left;.... if((top - (window.screen.availHeight/2) - 300) <= scrollTop && item.attr('isLoaded')

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 43, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl5Utt9Lxl/k4E08up:6v/lhPQtth7Tp
MD5:	F8E6C34624EE66C1297B83F698919054
SHA1:	0BC6FA5A3A4306A506F3E9BA2B46B4D02CAEC0BF
SHA-256:	7C641440A175B40FDFD188E4C383EB9A5298E0A8E42E8D7A3D5142E33304BE3A
SHA-512:	BBDCD9BFE791829A0B56C6A55EA91178FF9E1A1E638679B1073273AEF4B82FD44E0E049E9990EAD3F23310A2160E481BB70543804F5813151DFD21E9AABC6987
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...+.......<.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
URL:	https://s10.histats.com/js15_as.js
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1097), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42061
Entropy (8bit):	4.3736818956706704
Encrypted:	false
SSDEEP:	384:YFQHND6iVtP5SvU2abwSCS+SplYRSops9rt/iJV4FbzF4pQ4s:eQHNDZPPsPSqugD4tF4pQ4s
MD5:	10F2FD8154D630163D0131656B442FCC
SHA1:	1D0B3E33EEF2222D792AFB3DF4DA55CD227D0A3A
SHA-256:	4D3BED16D74A4E3DDE8FF2C1CC1F1AFBBE73E9FB3830C4269B84A391687B5375
SHA-512:	B26BC95EF618FD4E8621AEE4F490B289AE7A75F42FA9006D67B3327834D301E51C9420FF37FB5AB472E37973421C3F4DB8A939EE3E86864B344D07B99F5301A8
Malicious:	false
Reputation:	low
URL:	https://alluc.co/watch-movies/passengers.html
Preview:	<html lang = "en" xmlns="http://www.w3.org/1999/xhtml">..<head>.. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.. <meta name=viewport content="width=device-width, initial-scale=1">.. <title>Watch Passengers Online Free</title>.. <meta name="description" content="Alluc: A spacecraft traveling to a distant colony planet and transporting thousands of people has a malfunction in its sleep chambers. As a result, two passengers are awakened 90 years early. - Alluc" />.. <meta name="keywords" content="" />.. <meta name="robots" content="index, follow" />.. <link href="/images/favicon.ico" rel="shortcut icon" type="image/x-icon" />.. <script type="text/javascript" src="/js/base64.js"></script>..</head>..<body>.. <script type="text/javascript" src="/js/load.js"></script>.. <script language="javascript" type="text/javascript" src="/js/tooltips.js"></script>.. <link rel="stylesheet" href="/css/style.css" type="text/css" />.. <link rel="s

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4292)
Category:	dropped
Size (bytes):	4636
Entropy (8bit):	5.501046463408914
Encrypted:	false
SSDEEP:	96:rDAwlnIglnIJlPolPeilPilHlAU2EWuSySCxSySCU5aCKX6zNl/jwlnIglnIJlP8:vAaIKITIeSpU2ERX6xtaIKITIeSlS+H5
MD5:	0E455C930EB772725553D8AB1F92FDC6
SHA1:	E3B6EDF2D24BBF1EC3AFEB8FAE51BC25D4F18E52
SHA-256:	419B600E2A3D2523ED458633A946A9A07FCF046077F0EA79F3E435F154F04EE7
SHA-512:	C2DB4DE85BC8E7E89402C7287CB1CF68127C80F5DCDB28367AAB80C3D7B946C55EDF1DA8C3D47F983B6E7AC923F83B8CC09AB7CD6D27D41DC566B97EC7652BD7
Malicious:	false
Reputation:	low
Preview:	/*. Minified by jsDelivr using Terser v5.7.1.. * Original file: /gh/joeymalvinni/webrtc-ip@3.5.4/dist/bundle.dev.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.function is_ipv4(d){return regex_v4.test(d)}function is_ipv6(d){return regex_v6.test(d)}var simpleIPRegex=/([0-9]{1,3}(\.[0-9]{1,3}){3}\|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/g;let regex_v4=/((25[0-5]\|(2[0-4]\|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]\|(2[0-4]\|1{0,1}[0-9]){0,1}[0-9])/,regex_v6=/((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}\|:))\|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}\|((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3})\|:))\|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})\|:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3})\|:))\|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})\|((:[0-9A-Fa-f]{1,4})?:((25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)(\.(25[0-5]\|2[0-4]\d\|1\d\d\|[1-9]?\d)){3}))\|:))\|(([0-9A-F

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.282460356599068&stid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2F&event_source=dtscout&rnd=0.04960668425926551&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2444
Entropy (8bit):	4.6758452171921325
Encrypted:	false
SSDEEP:	48:Guui4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:qi4KtlTla/szp6yqaIvzLx
MD5:	011B458C5D07F2B7F2159B09EFAF3517
SHA1:	CB98FC77F51303C113F4D0B08EE1BE7D27512CA4
SHA-256:	B05C845B2B8C09866E3D1EB91C5828D8DBB8BDB483E2ABE5D315C8185239E7DA
SHA-512:	DF5DD20459D2A119F80295A99ED339C76135801134A579B6C3DF1B5C6F609C2A8EA3355337DB268A71317AFE053A4632D6B5748883FCED4A25C64C7FBEBAD745
Malicious:	false
Reputation:	low
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZGsAAGdhV9kAAAAIPUfYAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 32523
Category:	downloaded
Size (bytes):	10385
Entropy (8bit):	7.980989024743977
Encrypted:	false
SSDEEP:	192:gwERd0OvaeSh4oDkG95TfG1yfW3cSMTLjZLMoWndIb078acF7Rqcl:MOuSf3G1yfW3cSyLjsdY078rqw
MD5:	F62FE8683B217122418389B8440556E3
SHA1:	B10FDD6B68F5A334834AD733871105CA3F161485
SHA-256:	0E59FC7F61E65C48C9EB633E2152C991E9D94676B31EF652B3BABFD1A70A90AE
SHA-512:	E00CC2044122E2879357874DE805239A20C4D6F3958997BD4AADF9B61356F6A9544A72A37DBD055D9A37897D6F50214A7CCBCE1B2747B9EC324EFFD92ED957F4
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1.1620.860/a/US/t_.js?cid=c026&cls=sync
Preview:	...........k_........J]..q.@(q...e..P..v..5..n...@...~~......>...?..E.F.hn..].\^.._\|..X.&/.1......}.i....Ya:.....p...rc...sxa....8......G.}...\=1M5.E..>...o...6.....Cc.5..M..s,..1.x!ar....N.}c\|.z....`l....=0...-...\..........K.......O..i....{.s06.....eo.el..Na.....{..h.../.E.$....^..........p........1...{&i.....-C.4.1``.O..Qsk..B.T..j2......)..7...k.#m_..v.#.l....!%.4W4.o...o....16.....1.`Z.o4.pj...p..ck.Ac...no.n7......n..hp.q..j..1]9.xq..T^.......[....Xa\|_i......g.....6!.J..:)UZ[...i!.Fc...;R...........qy.d...i.;.d.=9.............R0''.<h..C..V...g.-CV.@.....@..2..A......2d..@.. ....^..\L..A..o.=0..`:.{>.......E..F\........v4.i..........p...N.hp.z....V.IS.}`3.)83....4.46.....F1,..`..FC...tm...t..~?../.........G.5..... ........g....,....^.F.f...?..i.../x...7.O.I....l..U.!.-Vyo......}....l..A:D........o.9..F.\|..t.'...h<X/.~.i]..u................L......f...O....~.x...~:...!.s......MG.h.....)....b.O.h..NZ>U.?xae...........{U..p..[e..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5889
Entropy (8bit):	5.086300759380413
Encrypted:	false
SSDEEP:	96:m9eJNqnzlvGC69A8Tq0+pET74oKZOxSM9BxY21u0uIt5GZxdxoMoGdYUHf:OQkbCA8Tq0+pEXrKZOSM9Bq21u0ulxSg
MD5:	13D1A2BA273782DD25DD8ABC54F4C4D9
SHA1:	E2B2E0440B78AED45B523459343710F9E18AB9A8
SHA-256:	E2F1967BD0FF37182A4C0D4AF0AE9CB04CDCBD189CEC906BC2E2D9E0A36209E7
SHA-512:	41F3F19B8AD3F85A68247CDD7D0E995B6742AB3A64E9753CE8BB8A15746DCCE8331E33FD73B4B6C2A49B323E0F350921035884E41283FFDF4444AD65B0AAC7E9
Malicious:	false
Reputation:	low
URL:	https://hqq.to/styles/global/embed_player.3.css?130
Preview:	..html, body.{ height:100%; }...body{... font: 1em 'Open Sans', sans-serif;....margin :0;....padding: 0;....overflow:hidden;....height:100%; ...}....ul{.....padding: 0;.....margin: 0px;....}..../.grecaptcha-badge{display:none !important;}/..../.grecaptcha-badge{bottom:-200px !important;}/..../.grecaptcha-badge{z-index: -1 !important;}/.....grecaptcha-badge{visibility: hidden !important;} .....fon{.....width:100%;height:100%;.....position:absolute; .....top:0px; .....right:0px;.....display:block;.....z-index:1000;.....overflow:hidden;....}.....play{.....position:relative; .....bottom:50%;.....right:50%;.....height:100; width:100; background: url('//c.vkcache.net/images/play_but.png') no-repeat; background-size: 100%;.....z-index:1000;....}.....fon_photo{.....min-height: 100%;.....min-width: 100%;.....width: 100%;.....height: auto;.....z-index:1000;....}....@-o-viewport{.....width: device-width;....}....@-moz-viewport{.....width: device-width;....}....@-ms-viewport{.....width: d

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2444
Entropy (8bit):	4.6758452171921325
Encrypted:	false
SSDEEP:	48:Guui4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:qi4KtlTla/szp6yqaIvzLx
MD5:	011B458C5D07F2B7F2159B09EFAF3517
SHA1:	CB98FC77F51303C113F4D0B08EE1BE7D27512CA4
SHA-256:	B05C845B2B8C09866E3D1EB91C5828D8DBB8BDB483E2ABE5D315C8185239E7DA
SHA-512:	DF5DD20459D2A119F80295A99ED339C76135801134A579B6C3DF1B5C6F609C2A8EA3355337DB268A71317AFE053A4632D6B5748883FCED4A25C64C7FBEBAD745
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZGsAAGdhV9kAAAAIPUfYAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9716
Entropy (8bit):	4.667533449250915
Encrypted:	false
SSDEEP:	192:IOO3iojYlvQJgcxB0nTPQZbXXTXHTJ4dUzt7odNAP3pkJuO09eW8ma/AQTpGQvJN:h080v5txkl0GPLQLgFio
MD5:	EA54D2A87C6220F6963BD912B06321C6
SHA1:	2B3231FC31FFB072C51C901244AA89C5E1C4BCEF
SHA-256:	BAE0BE00456EA666920477BE254FDCF5104A179CC46135C316A70DDBEE9F8964
SHA-512:	BC234B5B46CE469975F772CAB10D81D6D27763F576B8C0CFE8158C88D412555898C716E234F8A8452FC9AE2660CB1F679C746F05FF672EE2F34ADCDE03592056
Malicious:	false
Reputation:	low
URL:	https://p.dtsan.net/dtsa.js
Preview:	/* eslint-disable no-console /.((window, navigator) => {. const SEC = 1000;. const MIN = SEC 60;. const HOUR = MIN * 60;. const DAY = HOUR * 24;.. const state = {. loadTime: Date.now(),. capabilities: {. beacon: false,. },. user: {},. events: [],. eventsSent: [],. timers: {. idle: null,. },. };. const config = {. debug: true,. endpoint: 'https://a.dtsan.net',. sessionIdleTime: 30 * MIN,. sessionStorageTime: 30 * DAY,. };.. // ----- HELPERS ------. function identifier() {. const str = (Math.random() + 1).toString(36).slice(2, 12);. return `${str}.${Math.floor(Date.now() / 1000)}`;. }.. function friendlyTime(elapsed) {. if (elapsed < SEC) {. return `${elapsed}ms`;. }. if (elapsed < MIN) {. return `${Math.floor(elapsed / 1000)}s`;. }. if (elapsed < HOUR) {. return `${Math.floor(elapsed / 1000 / 60)}m`;. }. return `${Math.floor(elapsed / 1000 / 60 / 60)}h`;. }.. function debugMessage(le

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3159)
Category:	downloaded
Size (bytes):	173807
Entropy (8bit):	5.211863125095587
Encrypted:	false
SSDEEP:	1536:wC2WqSTgL8Jeu5cjs0OO0Dl+pHx41+sHe6v1WnJwq5EIQzHBexbfJNbYAoOLPFAU:z2LI70OOe9zq55Qzhe1Fal7nluX
MD5:	2EF0F0AACED28CAFD6F81E3817E119A5
SHA1:	A7350DAD6F2A5A030506712A3500AC5991C858B4
SHA-256:	C08FCC8C5A98D44983C1B328F7345751E4AA22D21B90B1929C5C084FB62BF863
SHA-512:	5C00B77E75B2DB597924553DDF731CFAACD26ECDD84065740E408BE99C90D0CCA8CC0D2B3106614F72ED2EACD1982AD66DA087B70FF14A121981E42AC1EB34FB
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/embed.232.js?736
Preview:	function ignoreerror(){return true;}window.onerror=ignoreerror();..document.oncontextmenu = function(){return false;}; .document.onselectstart=function(){return false;};.document.onkeydown=function(e){e=e\|\|window.event;if (e.ctrlKey) {if ((e.keyCode=='85') \|\| (e.keyCode=='67') \|\| (e.keyCode=='65') \|\| (e.keyCode=='45')) return false;}};document.onkeypress=function(e){e=e\|\|window.event;if (e.ctrlKey) {if ((e.keyCode=='85') \|\| (e.keyCode=='67') \|\| (e.keyCode=='65') \|\| (e.keyCode=='45')) return false;}};.try{.window.rInterval=function(a,b){var c=Date.now,d=window.requestAnimationFrame,e=c(),f,g=function(){c()-e<b\|\|(e+=b,a());f\|\|d(g)};d(g);return{clear:function(){f=1}}};.window.rtimeOut=function(a,b){var c=Date.now,d=window.requestAnimationFrame,e=c(),f,g=function(){c()-e<b?f\|\|d(g):a()};d(g);return{clear:function(){f=1}}};.}catch(e){console.log(e.message);}.var isChrome = /AppleWebKit/.test(navigator.userAgent); // && /Google Inc/.test(navigator.vendor).var isIE11 = (!!window.MSInputMethod

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6004
Entropy (8bit):	5.1238144839317386
Encrypted:	false
SSDEEP:	96:1RJvi/lpL/BlPqOkZptcahmMQylr5alzhIizYcSaUoZB4zB:NS/PLIpOUr5DiscsoZBkB
MD5:	D869AEE0FF8C887B19DA7A0E3556AAB2
SHA1:	5A026FF118F8C36B63BACE86C3E4605679981DD7
SHA-256:	77133095FE768D3F5CDC20C2361966AEF4A90AD77A5DA97DF9E1E9D3DFBFA154
SHA-512:	EDFBB6E16D16C67BAB85A397D4A1C5E85CBDF8C68A63E18BBFAA1FE24148BCFB29F3998FB9099D466846A55760F30D5B9742CCA5A6C213998335F9AEFB8BD83D
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/style.css
Preview:	/Side Bar/..#sidebar{float:right;width:309px;}...sidebar{float: left;}...sidebar ul {list-style:none;}...sidebar .s-inside {float:left;width:309px;}...sidebar .sidebartitle{.. height:28px; font-weight:bold;.. color:#78B92E;border-bottom:1px solid #CBE7EB;.. background: #fff url(/images/slidebar_top.gif)..}...sidebar .sidebartitle h3{padding:5px 0 7px 14px;}...sidebar .s-inside ul{padding:0 0 15px 15px;border:0px solid #CBE7EB}...sidebar .s-inside ul li{margin:5px 0 0 0;}...sidebar .s-inside ul li a{margin:5px 0 0 0;color:#78B92E;font-size:20px;text-decoration:none;}...sidebar .s-inside ul li a:hover{font-weight:bold;}...sidebar h3.title-last{background:none;}..skground:#FFFF00}...sidebar .s_content .thumb .img img{width:119px;height:175px;margin:4px;}...sidebar .s_bottom{width:300px; padding-top: 0px;}...sidebar .s_bottom a{background: url(/images/readmore.png) no-repeat right 2px;padding-right: 10px}.....thumbcontent{background:#FFFFFF;float:left;margin:0px;padding-bott

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (493)
Category:	downloaded
Size (bytes):	16498
Entropy (8bit):	5.049917292612675
Encrypted:	false
SSDEEP:	384:GtF5ZCb2tPD+lOjeFFcHiJVUv3gEcYWNObTq5/9KoDaA29LI3T1TU:oFKb2tPD+lOjeFFcHiJVUvQj3NObTq5a
MD5:	F357EF5376521647F779A6E0D27652E3
SHA1:	F176584C1302C0F085E3A841BBF3AC3ADCC33925
SHA-256:	9ACCEDD2DE24FAE9B517CA0B38F0FCFA0EDD363FB7C5C69F6F12F506F22A47E7
SHA-512:	F089CE11777A4777A391E9FA46979A7782AF83C3F57D640806EA5E24189104CF1B11331F73BFAB449A8B21FA5D56FB8D81CE479ABC9E1BAA31008BD1DBAFDF65
Malicious:	false
Reputation:	low
URL:	https://gomo.to/dsPlayer/player.css
Preview:	html, body {margin: 0; padding: 0; background: #fff; width: 100%; height: 100%; overflow: hidden; font-family: Arial, Helvetica, sans-serif; }..player {position: inherit!important; vertical-align: top!important }..vkps_adv {position: absolute; z-index: 999; left: 50%; margin-left: -150px; top: 50%; margin-top: -148px; }.#ntfound,.#continue,.#reloading {display: none; position: fixed; top: 0; background: #000; z-index: 1; font-family: Sans-serif; color: #fff; padding: 15px; font-size: 14px; text-align: center; width: 100%; box-shadow: 0 0 3px #CCC }..close {display: block; width: 70px; margin: 2px auto; color: #B5B5B5; text-align: center; font-family: Sans-serif; font-size: 12px; cursor: pointer }..close_min, .close_user {top: 0; position: absolute; right: 0; background: #A8A8A8; padding: 4px 7px; border-radius: 10px; font-size: 11px; font-style: normal; font-weight: bold; color: #FFF; margin: -8px; cursor: pointer; font-family: Arial; display: none }...user_advertise {display: none; }.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	145161
Entropy (8bit):	3.893058770622432
Encrypted:	false
SSDEEP:	1536:ouJRGdbe/x/KviAVsBtB6lOVxdm3NSZR5rshCvBzuNJRCSBsgwMkojWntoApuszn:2C/x/KviAVsBtB6lOVlZ6wk+YyD
MD5:	481F450B2AAFF3D814D43AA0C768EC4A
SHA1:	851BB6A791232109766D5B665689A5B4DDB67611
SHA-256:	327B97D7453A77010A4718F369B795E00549671B5C628EDAF8A99FC803CC77B3
SHA-512:	D017A3104109933009EAF0BDBA70DEEAD54FC1B96BECA2451FF59E11A88BE10FA286A9EED6B6522EAAD1922EDED9E27753B20ABE38960D50471F8C923964A2AF
Malicious:	false
Reputation:	low
Preview:	/! @silvermine/videojs-chromecast 2021-06-22 v1.3.2 /..(function() {. function r(e, n, t) {. function o(i, f) {. if (!n[i]) {. if (!e[i]) {. var c = "function" == typeof require && require;. if (!f && c) return c(i, !0);. if (u) return u(i, !0);. var a = new Error("Cannot find module '" + i + "'");. throw a.code = "MODULE_NOT_FOUND", a;. }. var p = n[i] = {. exports: {}. };. e[i][0].call(p.exports, function(r) {. var n = e[i][1][r];. return o(n \|\| r);. }, p, p.exports, r, e, n, t);. }. return n[i].exports;. }. for (var u = "function" == typeof require && require, i = 0; i < t.length; i++) o(t[i]);. return o;. }. return r;.})()({. 1: [ function(require, module, exports) {.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	37227
Entropy (8bit):	7.984586419134535
Encrypted:	false
SSDEEP:	768:9K+X6/t+PGENAL7cLcLMIzAeXtPiheUWTTJTV9pL/Y+FbVZr7Gdxx1HT2Qre:89/t++uAL7XketJlL/jv4UQre
MD5:	AE390520E13F115A287966362C0FDD07
SHA1:	BC23CDAEC1957011953C03587045B64B2A77C5D9
SHA-256:	3CC7522DE1AE6537F0DAF54B31F19ABDF31FBE5A8E79AA78820F0173A32EBE04
SHA-512:	4079342175C020842D1E5A00A98AF69FFBDCCD2F50F95449FF69271B6CB57512CB8A467011B15B485E6D9D42AC576511A69348899D83A7D3B60D52DE89B33147
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12321158916-poster-Wineville.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................J.....................................................................................$ws.\\|.....W...b...t.H4..-%J.. ...t.X{..H.\.[....D..h......t\|.....A...t..X.}.bDvgG.H.R...B.c..<C%...=.sm&..U...%}.E.V..Cq...;...,M^.H.GA.w;..^Zm.+R..^.w.Eh.....G^.".i...$.$.Y.1...s......._.P.jm.%._P.O."..'9..-5.-..1..Wn:8U.\...&.w...].<.J....to.;..Z?;.\|..E...L..SQ....i.z...\.+X...+^V...n..Z6Yv....m@.......>..D....V+W<..]Dx.b.v.[...bg.3&:..qN.TL.p..x...a...=.J.bu`...e.s.{.pv.ls......)7!AQ6..a.. y...D.:.c...8w..<).3.y..(.V.."nY.ML....h_=n.jVL...6....k4.0.....)...10E]~h....Wv....`..C...4.se}o"C...(]H.'....e....9.......&...+\........t~E.....<w..)\.$....\|.1=......=feV.....0.b..@[...%..Yr.........e..[.r-@U.b.J..n.w;.;[..l.s6..K,.e..L?...f..oC!...h..F(..Q&.+..B!^...p.I...n<?~.(........J.}....m.%1O.`.6...xw.....n.Y

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1699)
Category:	downloaded
Size (bytes):	1769
Entropy (8bit):	5.069701828516376
Encrypted:	false
SSDEEP:	48:rlASHhM5Pp0GPlStXW6NL5fuHWGTq9NEnBLvcA3Qo:pA1PqKlUWCL54WGTMqnBJ3V
MD5:	FAAD0DBC70EB24CFE93DBBA5CD8428BE
SHA1:	F91E1520499F757DE7220950D14DCF51B404BDE6
SHA-256:	6A54D2B545FC694A48AABBEA2FE47512EBA9E15672E8D73DF5DB4048EEB5C6F3
SHA-512:	1D6A9D34B39E7E067E5E92521B3F2098B0DD6D5CF80BA88F5AEBAD33E9F45576141D01ACE5893F919D8756296EBA9F0D67BE7536080DF5A12085557930CCD388
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/videojs-seek-buttons@1.6.0/dist/videojs-seek-buttons.min.js
Preview:	/! @name videojs-seek-buttons @version 1.6.0 @license Apache-2.0 /.!function(o,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],e):(o=o\|\|self).videojsSeekButtons=e(o.videojs)}(this,function(o){"use strict";var e=(o=o&&o.hasOwnProperty("default")?o.default:o).getComponent("Button"),t={forwardIndex:1,backIndex:1},n=o.registerPlugin\|\|o.plugin,r=function(e){var n=this;this.ready(function(){!function(o,e){o.addClass("vjs-seek-buttons"),e.forward&&e.forward>0&&(o.controlBar.seekForward=o.controlBar.addChild("seekButton",{direction:"forward",seconds:e.forward},e.forwardIndex)),e.back&&e.back>0&&(o.controlBar.seekBack=o.controlBar.addChild("seekButton",{direction:"back",seconds:e.back},e.backIndex))}(n,o.mergeOptions(t,e))})};r.VERSION="1.6.0";var s=function(o){var e,t;function n(e,t){var n;return"forward"===(n=o.call(this,e,t)\|\|this).options_.direction?n.controlText(n.louserze("Seek forwar

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 182x268, components 3
Category:	downloaded
Size (bytes):	9292
Entropy (8bit):	7.958315201190342
Encrypted:	false
SSDEEP:	192:1CynI1CHWX0aYpiqo2e66qaCK/Wb0SMkj2YxAA04K1hJRBaIbZ1M:1CyqUWX0amazWK/Wr9d2RRBL91M
MD5:	7F540666329D5CB68C05E32204F59A41
SHA1:	702E9C81EBA2DC840951C44764FA537D75D79052
SHA-256:	77CF71A181434D33228017E45CD7AADAC0B7375D5D4324757181228E5CF6D77E
SHA-512:	EC64766ACDB1D5AC04761DE0815724B60E1C8512B22408CCEC0A27FC9795DFAF37047301E188A92744AE2840D817DF5D0DBF2DA418652EE8944BE5DB8DEE9342
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/1231355644-poster-Passengers.jpg
Preview:	......JFIF........................................................... ....+!.$...2"37%"0....................".........................."..............#............."..............................................................!1A."Qq.2a.#BR......b..3S..$C..............................................!..1.AQa"Rq...b..r................?../..r}......s#w......r{.W....Z..<.RA..GF\|....{.N.W.F........+.V....d..c.GS.......^M.w.?...7p.#....=.z.[.._.hd....e..v=0;f.bVV..0Z...@...4.>.$..;..C.....W...S..{.......?..7.z...1S..i.v....Py;W9S...L3>.\|..X.W..;.`.d.........O\..5.0..Y.a...p.2..A.0...5.....s......X.J.....u>..r.7.1T...$.....l..+...n<....~..T.#b.....9....d..K.C...A&.=x.fg..F...h.D..2...q.W..z..DCF.?.s..P.....hA.0N23.~.&i.]^..E..[L..TU.-.8.I .KJ....b%U.X..=..}(....lr..}>.O.=.`x5%lt...x....x..:=J+.&.7..V.pv.....P.Y.m.;.........}.n....(#. _..?By.[f...Vw....a...~.*.?.In_.c%`...^..#^f.o6=.....d..j.......jS..)p[.0.Q.d>......B!..R[q...'.SS_L./n\..IV......

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.0722588624980185&stid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1734432742152
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3345)
Category:	downloaded
Size (bytes):	3468
Entropy (8bit):	5.332300110951297
Encrypted:	false
SSDEEP:	96:05rHnDaSDpiGqpfN9XnQLcR27yIEuVLAzg:2rH+OwfTnWcR27yCL6g
MD5:	B9CC1EE5FCE5E7B56943458216328E3B
SHA1:	4537838067326009397A688222AA097F4E95A5B6
SHA-256:	B3D1A33A211459596087726303ADC24E3516513EBFC39A336D5092ADD84F2EF6
SHA-512:	30B6AD0A20AF736A6FAAAA6990A0552D230AA5F41DC1DCA6F2BDC95E64D6F239648A9403CA0B1D4F10C12ED13CDD2B0B196ABAE1E2806592C8AB5B2FD26FBE3D
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/videojs.hotkeys.min.js
Preview:	/* videojs-hotkeys v0.2.14 - https://github.com/ctd1500/videojs-hotkeys */.!function(a,b){"function"==typeof define&&define.amd?define([],b.bind(this,a,a.videojs)):"undefined"!=typeof module&&module.exports?module.exports=b(a,a.videojs):b(a,a.videojs)}(window,function(a,b){"use strict";a.videojs_hotkeys={version:"0.2.14"};var c=function(c){function d(a){return 32===a.which}function e(a){return 37===a.which}function f(a){return 39===a.which}function g(a){return 38===a.which}function h(a){return 40===a.which}function i(a){return 77===a.which}function j(a){return 70===a.which}var k=this,l=k.el(),m=document,n={volumeStep:.1,seekStep:5,enableMute:!0,enableVolumeScroll:!0,enableFullscreen:!0,enableNumbers:!0,enableJogStyle:!1,alwaysCaptureHotkeys:!1,playPauseKey:d,rewindKey:e,forwardKey:f,volumeUpKey:g,volumeDownKey:h,muteKey:i,fullscreenKey:j,customKeys:{}},o=1,p=2,q=3,r=4,s=5,t=6,u=7,v=b.mergeOptions\|\|b.util.mergeOptions;c=v(n,c\|\|{});var w=c.volumeStep,x=c.seekStep,y=c.enableMute,z=c.enabl

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26862
Category:	downloaded
Size (bytes):	9846
Entropy (8bit):	7.975917429874461
Encrypted:	false
SSDEEP:	192:1KGsNvJ1f/tw1U06ufU79D6qxIx11rOjY0Tn+Gk7ggowbY4C2L90ahbT:1KfvHd74sZDf6rAY0MgFkYmPhH
MD5:	DE7338648337C4BA1F400D65E7F8CFBE
SHA1:	CF27343003FAC16577674AF699A790BDACA61BE0
SHA-256:	E1F07AA2E83910A836B903306844F9FBE7C0576038E6AEDAFBE7CC20CB0CEAA3
SHA-512:	6EEE03B2A68D3E25FB7C01870986D2D42B812DDCE6C87FC6FD690609E0160AED8E23D55E99925F8C2966460D869625191C68FBD2037F615427E72E73652965A8
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1.1620.23405/a/US/t_.js?cid=c010&cls=C
Preview:	...........}_..8..}...u.Z.q.C..Y.....m....G!n...J...k.}F..'...9.{..{...F...h4.=.c_V...v"....3b....<.7....U}.U....w...Oc,.@......0.S.F..g.....[....tn.}k0...n....o...Gr.-.y2.i...'.Hk?.wU..O..}.M.n..I.c.<...uz...Uy..u.I.....O..Ie.T...u..U.>.n......g...y.E..'.?q......4.\|....Oo.[..nUR$.8..f.....Ar.e............}ks.2.\QUk.O.wo.}+jm...Z....}k.......4.j.i.I+j.UD\|...K6....q\|...`2.y.9.x.)v..@...&(....($h.S.,....q.Rk.<.8.m.....w'..D.'r..X.S..O..w.o.[.u.y ..9.?.+o.}::>?y...t..2h....T.t..I5..... O.Z. ..".......A.".^>...@..Bn...?..^.1....p.w...N..u.....rr.'.<qq..).\/.......T/...N....w....{;lw.Q..p".^V.O.7`.4......n....Y.V...L...x&S$.{.6..:.>..$.....'.1..Kf...e.=...~...n........C9.y..6..lJ.j..f<.yuWi&....4+.=...m6~=j.O.......>.....vm._OK......'+............M.3....r...^...71..........p..>>\|....u\|..3.....\|>Z..;...sm.[o.....u...O..s.:..Ppzq..K....c.....9..smC...3 ..Ro..; ...x.i...w..{(...9.2..;..n}...Z.....j......t5A.p<.{.....#.>...$?

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	280747
Entropy (8bit):	5.584403572461184
Encrypted:	false
SSDEEP:	6144:VUzYnsmQ8ouZ1HcRCriua0Mf3/BrfyuT+bsZG:K3m9ou7Hc89aG
MD5:	7B3E4E1005E8396B6AD02078B26195CA
SHA1:	B0629681B63AACF5E5996CD7A255D13B13EDE068
SHA-256:	68928697FC6AF060A38028E3D105CD21DD67823BA5C2E7BD253E9DD484375732
SHA-512:	4CB4A58EEE8621F86EE0444ED2A1D956F74C3FB7CC09996EDFEBEBD2A32B912FF7637DC1C3037AE09C5E0A6057ABB09367C48FD315407925754376F9E427F0E8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","gomostream\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1227), with no line terminators
Category:	dropped
Size (bytes):	1227
Entropy (8bit):	5.126019489229876
Encrypted:	false
SSDEEP:	24:bnryFSODqLR31LUM/y2YHSMMbZ8+3nWALyIFaQRSXFUK0/XE37Enc+DzU/y+:bryFRDqLL/y2wwb5nWAZaV1UXcIcMzd+
MD5:	981CE49E4C69148552B01CBBE30F0858
SHA1:	9CB566FA0E6CFDA06FE4721214ACC445D443EF07
SHA-256:	458CC3BE215BEF898D5E6A41E25F0C022E6D5D5E61ADD13F13C01898BB53B9BC
SHA-512:	2577D9353C0172FA0E9AE38834BD25CB9C97892F5C90B7B3D186C0A6E55D8EEBD66F19133C5881B8E5D4CC575D0FFCEE31D6A33C42F4F62ACC0CAE9DA07772CA
Malicious:	false
Reputation:	low
Preview:	!function(n,e,o){function t(n,e){return typeof n===e}function s(){var n,e,o,s,r,f,l;for(var u in i)if(i.hasOwnProperty(u)){if(n=[],e=i[u],e.name&&(n.push(e.name.toLowerCase()),e.options&&e.options.aliases&&e.options.aliases.length))for(o=0;o<e.options.aliases.length;o++)n.push(e.options.aliases[o].toLowerCase());for(s=t(e.fn,"function")?e.fn():e.fn,r=0;r<n.length;r++)f=n[r],l=f.split("."),1===l.length?Modernizr[l[0]]=s:(!Modernizr[l[0]]\|\|Modernizr[l[0]]instanceof Boolean\|\|(Modernizr[l[0]]=new Boolean(Modernizr[l[0]])),Modernizr[l[0]][l[1]]=s),a.push((s?"":"no-")+l.join("-"))}}var a=[],i=[],r={_version:"3.6.0",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(n,e){var o=this;setTimeout(function(){e(o[n])},0)},addTest:function(n,e,o){i.push({name:n,fn:e,options:o})},addAsyncTest:function(n){i.push({name:null,fn:n})}},Modernizr=function(){};Modernizr.prototype=r,Modernizr=new Modernizr,Modernizr.addTest("localstorage",function(){var n="modernizr";

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (309), with CRLF line terminators
Category:	downloaded
Size (bytes):	37855
Entropy (8bit):	5.466508551620447
Encrypted:	false
SSDEEP:	768:BuusUv7FJ1WH3dJ7jkplkHIhsX6Cp4wvhPRXknB9QZ3fPXkYkvBA:Bu3UDFJ1WNJ7jkjkohsX6CpdhPZkBuZh
MD5:	D9E7A2A4C3BABC0614F1D1D373AB3FE5
SHA1:	CC1957C445245AEDAA94222F3298F5DDBD82DDB7
SHA-256:	B2AE11ECEBCB811CE4AB2C31E44EE3290121584114312B9B8579F7395ED57336
SHA-512:	A6945C4EFE07911D8691F46911AB6F11824C89FBEC7B34208D0431375D41037A7E1638D78DF06D5C5E1C23433E6E219FEEB4A02EC9C8DD5B83B089EA913420AB
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/tooltips.js
Preview:	./* This notice must be untouched at all times...Copyright (c) 2002-2008 Walter Zorn. All rights reserved.....wz_tooltip.js. v. 5.31....The latest version is available at..http://www.walterzorn.com..or http://www.devira.com..or http://www.walterzorn.de....Created 1.12.2002 by Walter Zorn (Web: http://www.walterzorn.com )..Last modified: 7.11.2008....Easy-to-use cross-browser tooltips...Just include the script at the beginning of the <body> section, and invoke..Tip('Tooltip text') to show and UnTip() to hide the tooltip, from the desired..HTML eventhandlers. Example:..<a onmouseover="Tip('Some text')" onmouseout="UnTip()" href="index.htm">My home page</a>..No container DIV required...By default, width and height of tooltips are automatically adapted to content...Is even capable of dynamically converting arbitrary HTML elements to tooltips..by calling TagToTip('ID_of_HTML_element_to_be_converted') instead of Tip(),..which means you can put important, search-engine-relevant stuff into t

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/ttd?uid=7ad990fb-c8ac-439b-aaa0-c9166989fa1e&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	8341
Entropy (8bit):	5.1742808936690015
Encrypted:	false
SSDEEP:	192:Ju/1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLan55TFkY0yW/GaKdgH:KUIxSymDAZJFDfRLanXTO3ll7
MD5:	A59791F54B7EFC2DA0C63471BE00C748
SHA1:	F0C3D498E58F2D2F983451CDB38C9ACFF614A098
SHA-256:	621870A2E4FDF87B56F14F81C6D504DE61A148E577A6172F6677551A64C4B4E4
SHA-512:	B49017F35E022D23171996BA1A4E9DC433690883E0A4C9C66C4221D7638B4B2F6F0EF326CED403B38F89001B76635A001ED7A47A586A784E7D30D984461D25B3
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8
Preview:	(function() {. var dc = {};. var gu = "51A0173443272670518C9622FCF8D1A8";. var su = "51A01734432771BE3727193FA588DB3C";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	14640
Entropy (8bit):	7.964045439554416
Encrypted:	false
SSDEEP:	384:o/SDAUzs7bTiDHP9nHCzfQspuWea66jfE3Izf:YosriDv8zfI36jfEYT
MD5:	EDF915203EFD1A3559EE134D2A764249
SHA1:	25C5711071F9DEDBB04AE47DE03DEFBE6C4C4869
SHA-256:	D2BBE054BB89D835D39C7879055098F1B80EA0F495C71E453141EF5196C52C18
SHA-512:	340B4330687C121E80314A0AEEB642528A89920725C24C3C26D38936FD8E9B6CBC73DF1944C819562F4C6AD349B7CEFEEA1B1416F53642C18AA0555EE126C38B
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12330989112-poster-Sinister-Surgeon.jpg
Preview:	......JFIF...........................................'......'#" "#>1++1>H<9<HWNNWmhm................................'......'#" "#>1++1>H<9<HWNNWmhm.........J...."..........4.................................................................._[.S:d.K8.?K..d.B.....j.t....m...d.].(.9.sX.H$..i.,.^....`..\|....wc.........".\|..>..h..D....K..l...1..7..^..@.e...q=\.<.....[S.[UYF...\.S......?....H...."..2.".m..i.....0>u._\|.\..R.%hvE.k!4....l..O!d...S.E.,..Av.!..:F..>..E..0...S..>..u$.kN.t...#.1G%H.:..^x.z.I.E....t...0..3.*.T... .........Iu0...h...6.....q.~.@PsO.A..b.z..+:.......e?..Re.Yx......_.C.].9..o2...CLJ.:...k..\5cccg..\.@.P].O;....?B..M..g...y...j.>x...u(..a...:o3.HG~..8X.Uzk..h.N6.O2..]k."..`...T...Py'....w3)\|....u$.E...Y.:;r.7E...3...(~....7.g..5y!.,.s..o.}N.....C.h..W.....D.f`.)..-/U{.C).[_.9.-.k.+....Di....y..j.....v.......'..+.{.g>...^m.x...t....n...6..,......>M.}...J.5...C..D\...#%.P.u.F..G...Z..z.../.y].9.}.3.e..m.)YL.....".$r...6......1.-

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48459)
Category:	dropped
Size (bytes):	587180
Entropy (8bit):	5.321185097931326
Encrypted:	false
SSDEEP:	6144:x4ViwQUn3avGhZPfvIWaiKdsrjMuFbaMcp/dMj7VOLdPOR5ZXN/FSg/:x4ViwQUnKvGhnjMuFbSdd6Sg/
MD5:	BF2968C3512CEBABA30FB57C62990754
SHA1:	7737CBCFD98F38B4ED94C21E235D2A456281D298
SHA-256:	78EC90AEEB78B54C0C38B2011A7908947143B4C5F70123F48F252DCA2510C25E
SHA-512:	31506B22759D1DA0D040DAC3126674A999EE7254C10302099FC21DF5E1336626C01DA5A378017C4C433745C274F5E1A35A03EAF1477EE36C1E82C8ABF2EB0B7A
Malicious:	false
Reputation:	low
Preview:	/*. @license. * Video.js 7.21.1 <http://videojs.com/>. * Copyright Brightcove, Inc. <https://www.brightcove.com/>. * Available under Apache License Version 2.0. * <https://github.com/videojs/video.js/blob/main/LICENSE>. . Includes vtt.js <https://github.com/mozilla/vtt.js>. * Available under Apache License Version 2.0. * <https://github.com/mozilla/vtt.js/blob/main/LICENSE>. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).videojs=t()}(this,function(){"use strict";for(var e,u="7.21.1",i={},a=function(e,t){return i[e]=i[e]\|\|[],t&&(i[e]=i[e].concat(t)),i[e]},n=function(e,t){t=a(e).indexOf(t);return!(t<=-1)&&(i[e]=i[e].slice(),i[e].splice(t,1),!0)},l={prefixed:!0},t=[["requestFullscreen","exitFullscreen","fullscreenElement","fullscreenEnabled","fullscreenchange","fullscreenerror","fullscreen"],["webkitRequestFullscreen","webkitExitFullscreen"

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	11104
Entropy (8bit):	7.964419567130439
Encrypted:	false
SSDEEP:	192:qEqLDxKJNPUu+8nM6VVG9injRq9OMhbQRgdbgMIVxrwPNS+9YaV5YwuNsIElbWST:qEYAJN6Z6/+kMhbQSuM2xruA+99o612g
MD5:	CE8B2843D207740FF1E257D35626DC31
SHA1:	A9F8296F139EBEFC945471A9DFEEE0FC84476F53
SHA-256:	59A7240F879F0FCE0D7B5F99008BC842004381FD62D7115155C6D609D0383986
SHA-512:	8B5BF198B566B002960534755C2C8CDAC929F1C59587A909A8E9C1EBF062E7AFD9087E4C86D0F557E9EE98AC94CCDAD13C6CCCD13DB7E49DC22F6A7DDB4E0FE8
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12311450972-poster-Tokyo-Shaking.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........J...."..........5....................................................................f.SK.~o.N...O..7-.....m.!...u...^..B...&F.K..=.....G\|.u...{.[.o....Gn...CN...&.....s..R..m."Z..H.W.fIJ."S..=[~..6..........61@./.I..../&MSn].w{.6.!h..s...Bq.N4T=.-9.Rku.\|....R.2.s..PU.c....M...`...f].8.<....d.....y...J..W..._%...Rf.._..QuP.NT9n..-.5v"...W.;3.."...f..G.....\|D}F.r...N.(^.J....5...lz.../%P..w...IS.N.#..Ui..-h....%..ul>...{....D~eB...z..EBV}...6...X.n..~s."<..6....u..F.Qzn..>Y2W6.......BW..i.{..fWb.O=..P.g.i8]......o..].,IA&+z.].O..a.Fzd.R.W.y.GSuhhZ...g Iu=.+.s..^?Z...I...m.{..4l....L...3l.X.p.X.)9...>..b.!K..<h..R.c...n.T.fJRz....qU..lv=.lr...A.3J....4.u.q[z.k..f.Jm..........b{&.i..ga[....s.r.f..)..".U"._..jU..;Uo..=?.J@g..0o6.e.e......M<..s.v.i.7.El..x;..".^.+..T.{..R+.c ...~c.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 151, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	972
Entropy (8bit):	5.937657019598261
Encrypted:	false
SSDEEP:	24:41hpunQWwjx82lY2T32HEVJ7mx4yJ3VVLb5G931Y:2itNn2VcJ3Zu31Y
MD5:	B96969041DD54E00A956CB540B536D22
SHA1:	E8A7C7914CFA11237A8B9B3EC2A33199841E7134
SHA-256:	8760363F47C1B5E34F6AD0DF1EB905162D0076E4A8D9F834AA951070CD963EFC
SHA-512:	12B079C347B550D6C9EAE5D33E1E9F7DD1CA1DAF335A41C4393260619D2A20E70C9E6A8C99E27A700F08BEEF23546361A4AFEDB848F88304253E3DCAF23C3724
Malicious:	false
Reputation:	low
URL:	https://alluc.co/images/mask-title.png
Preview:	.PNG........IHDR..............*1.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AEEF115141F511E591BFC75C211CB29E" xmpMM:DocumentID="xmp.did:AEEF115241F511E591BFC75C211CB29E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEEF114F41F511E591BFC75C211CB29E" stRef:documentID="xmp.did:AEEF115041F511E591BFC75C211CB29E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......BIDATx.b````a..l.,vT.....q.....Xtp......n/....."....%..1.Q.d9@....:..T&.]....IEND.B`.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32061)
Category:	dropped
Size (bytes):	84245
Entropy (8bit):	5.369495907619158
Encrypted:	false
SSDEEP:	1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh
MD5:	E40EC2161FE7993196F23C8A07346306
SHA1:	AFB90752E0A90C24B7F724FACA86C5F3D15D1178
SHA-256:	874706B2B1311A0719B5267F7D1CF803057E367E94AE1FF7BF78C5450D30F5D4
SHA-512:	5F57CC757FFF0E9990A72E78F6373F0A24BCE2EDF3C4559F0B6FEF3CF65EDF932C0F3ECA5A35511EA11EABC0A412F1C7563282EC76F6FA005CC59504417159EB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.1.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.1",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3291)
Category:	downloaded
Size (bytes):	64400
Entropy (8bit):	4.756016715013031
Encrypted:	false
SSDEEP:	1536:FphdME8rjfX0LmXsQEMe+uOVhOFKqY3RmuRrqr5RxI/gCQxgsp+gn:/hdSfAQK+gn
MD5:	0885A777C714486ECDB35160F9045174
SHA1:	3D6B8801002AB09BE5F890513BF2738C4AA9809D
SHA-256:	BE75E383D4E92E15EEA94D0E7153BBC7E0E947F1F5A427952CB49E43F23F494B
SHA-512:	7AA2E8364D873FF5F550233B5AC1E0D3391EA32577CBB78A69305ECC26684A100B2DB26261CA375C391C23AA805500D08868778298725562D823C0CD51681ADF
Malicious:	false
Reputation:	low
URL:	https://gomo.to/dsPlayer/dropzone.js
Preview:	./. . * More info at [www.dropzonejs.com](http://www.dropzonejs.com). . Copyright (c) 2012, Matias Meno. . Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. . The above copyright notice and this permission notice shall be included in. * all copies or substantial portions of the Software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=na
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.6897037321995474
Encrypted:	false
SSDEEP:	3:oHJKlGqQn:opKl7Q
MD5:	533A813DDB8F84D7E018BF8E6296C44D
SHA1:	8C95AF23D5DC502F1BC3395A6D2E339E696C0D3E
SHA-256:	A499068CF858AA2CD9B077E2E354B6BF8435EAA8E44C2047F403C7283031977F
SHA-512:	2187D4F5AB6F146A4B70F9FE9560FC24DB3B133F9C695DDE9E0B23835DE14BAC894D0C9A8DA643A31C6AAECBDE2CDB84240DBB9BFBC6BCD3DA3FABBD83ABBF62
Malicious:	false
Reputation:	low
Preview:	adblockcheck = false;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (732), with no line terminators
Category:	dropped
Size (bytes):	732
Entropy (8bit):	5.558787375988604
Encrypted:	false
SSDEEP:	12:+dQVkyrFzkE4ZaQOhaBVIQoUAjTfyMBYNAEGQT8cKe/iMifVxy0yQs2SbYKS:+d4tBzl4YhaB2bbyrAVs/pifPJyH2Sb4
MD5:	756AEE857EA7C662526CAC2435AC4222
SHA1:	1A9171FE0A544944EBE53D382C0A93298B7926B4
SHA-256:	83CD170984FAFF04C12CD1D351C3F170C0E5A19D19814CE3BE257F2ED8113948
SHA-512:	72FA3009E7D101314178BD0B3DD4BB475ABE0DE67B8A4F63D77D6C775F2E5C05BD3A12CFCA2E140C672FE38552F3FA6E5E7D4F4243F1958BD7134AAE6E0854FB
Malicious:	false
Reputation:	low
Preview:	(new Image()).src = "https:\/\/eyeota-match.dotomi.com\/match\/bounce\/current?networkId=41703&version=1&nuid=2kneuFoSmj-8l8m0gwZTXcxu4pMesuOXysvLDIY73h4k&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/trc.taboola.com\/sg\/eyeota\/1\/cm";(new Image()).src = "https:\/\/d.turn.com\/r\/dd\/id\/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w\/url\/https:\/\/ps.eyeota.net\/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&referrer_pid=51md42u";(new Image()).src = "https:\/\/sync-tm.everesttech.net\/upi\/pid\/lons7jax?redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24%7BTM_USER_ID%7D%26bid%3D0rijhbu%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/ups.analytics.yahoo.com\/ups\/58773\/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=";

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (442)
Category:	downloaded
Size (bytes):	3180
Entropy (8bit):	4.724890065625164
Encrypted:	false
SSDEEP:	24:b+DvYbCbUCZqXZuqoq3+qXnXAnvnAnjVwNZqXZuqoq3+qzOAEltV8ZW2uWTIRnXd:J/7TVl7EVaiH1
MD5:	30390644BACF193311E474DF72D8125B
SHA1:	4D203150B535279CA867AF5A235FB50C042B1A37
SHA-256:	DB0BEC5E5A246686E9BC50A60C15D8785305F1D8388C70D2D18464FF22DDC329
SHA-512:	B16B5E1647600E747A6607B1AF2B3A4FEC0635FE46DB8386C6C10DBA8A0F02900BDCF0AB2DFBFDA3A434271F2AB9C746192EA7BB749F29CC234C590FCC0D1826
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/psbar.css
Preview:	.ps-container{-ms-touch-action:none;overflow:hidden !important;}..ps-container.ps-active-x > .ps-scrollbar-x-rail, .ps-container.ps-active-y > .ps-scrollbar-y-rail{display:block;}..ps-container.ps-in-scrolling{pointer-events:none;}..ps-container.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail{background-color:#eee;opacity:0.9;}..ps-container.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail > .ps-scrollbar-x{background-color:#999;}..ps-container.ps-in-scrolling.ps-y > .ps-scrollbar-y-rail{background-color:#eee;opacity:0.9;}..ps-container.ps-in-scrolling.ps-y > .ps-scrollbar-y-rail > .ps-scrollbar-y{background-color:#999;}..ps-container > .ps-scrollbar-x-rail{display:none;position:absolute;-webkit-border-radius:4px;-moz-border-radius:4px;-ms-border-radius:4px;border-radius:4px;opacity:0;-webkit-transition:background-color .2s linear, opacity .2s linear;-moz-transition:background-color .2s linear, opacity .2s linear;-o-transition:background-color .2s linear, opacity .2s linear;transition:backgroun

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1458)
Category:	downloaded
Size (bytes):	12301
Entropy (8bit):	4.986700983637058
Encrypted:	false
SSDEEP:	384:UpBsxVzZjiD2fcAOw5o5p5X9N4sIVqxsbJ5t:q+3G0sIVq6J5t
MD5:	B167EA223CEB9BC6B6C71737553ED844
SHA1:	B13E26023DD525BA52DF4340B1A74625D9D1F895
SHA-256:	E33F8BD23FBD0C570983FC5EE30E2429D7D1A65683080F8D4841783CD0CAB26D
SHA-512:	EE09D85E16731A309D794B8E9A41A9CF20EC0EEDDC732A0BCB5461BC0F88F08A098EC9C01EFFFB163D1DD91499F4120CBBB825F0244B3B24B0913B0AB2308184
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/videojs-aspect-ratio-panel.js?4
Preview:	/! @name @yangkghjh/videojs-aspect-ratio-panel @version 0.0.0 @license MIT /.(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory(require('video.js')) :. typeof define === 'function' && define.amd ? define(['video.js'], factory) :. (global = global \|\| self, global.videojsAspectRatioPanel = factory(global.videojs));.}(this, function (videojs) { 'use strict';.. videojs = videojs && videojs.hasOwnProperty('default') ? videojs['default'] : videojs;.. function _inheritsLoose(subClass, superClass) {. subClass.prototype = Object.create(superClass.prototype);. subClass.prototype.constructor = subClass;. subClass.__proto__ = superClass;. }.. function _assertThisInitialized(self) {. if (self === void 0) {. throw new ReferenceError("this hasn't been initialised - super() hasn't been called");. }.. return self;. }.. var version = "0.0.0";.. var MenuButton = videojs.getComponent("MenuButton");.. va

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.0722588624980185&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	downloaded
Size (bytes):	1397
Entropy (8bit):	7.845645040159345
Encrypted:	false
SSDEEP:	24:XxX97Ak4Mj0J/yP4ubqlNUZho6mhst2QTnN8tPGGWrg1FS2jz9bihc0AOXvt/:XpVAk4Mjy/xubiu3ofsgoN8NSYWdh/
MD5:	6BE49FF49C58D6D81FAF666AC92E172E
SHA1:	9A4CF09531294290F139BC04A1CC76C5FB71CDD8
SHA-256:	2DD44E69DD00CF5092B2ED88FD6E4E9C5660D9394F151C99556FBED6E64AD0B3
SHA-512:	17F7DA4533B6C963B0232A7AC26A1038C88DFF79A9FC323AF86EDBFE29E1CCECCE23BDAC26B1CD12F0AB99B100946F431B379BABCDC0DF05F842504AC2D6B99E
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1/d/t.dhj?cls=sync&dmn=alluc.co&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=
Preview:	..........tV.s.8..W.~8.T-6...\q..4_.I..i~..fd[..#.Y.%....l.............&K...,-r..c&.......A.....N....wi:.lT.....x..I.6)...Z6.......Y?)../.J..t....\|...R..U.+m.s...;...2.,.f...C.1e..].....S;...igZ..`E`TU.T.N.jeO.5y....;A].....,u.&.V...l.....).uj*.\|.i}....3K.".. ..3.&.....L.pR...Ds.V....Y.0b.....cBvU.r.i..I+..f..5d;........^...l.[..<..&......'4.gem..y.o...m.S...\|}d</...)..$R1Y..Kz....<..~..p..q...m.3...q.B..Sv..c<..1...2?.....k..........3.t&.i.....<d.....l.........L......n.........:]...G.LZ.]e..s.x...V...7:...?.3...W.&.[....4i.rg..A...+C0..........`.>..O..(.)...... .'.g..9.....<v.1_C.<.....b.y......7~mM...d..;..tZf.n\|yZ.R+m.7.Fu..@....F.......P.b.s[h+z..h.]D.8.<v'.=. ..%.......f.&...'...nV.h1..C....H..OF ..4...K.^.....R[.r..x..\..........3...o{?.._...\|p.....h.......g...ET.M...."..............l...7.....!(..-.Gz...^8O.....7.......Q.y."...[.Z.3...=]W...>.._..S.,..x... ..p......U....<...........G.W<.T....n..........9..Q.<.l{\|b.nr.~......

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19927), with no line terminators
Category:	dropped
Size (bytes):	19927
Entropy (8bit):	5.680495692183685
Encrypted:	false
SSDEEP:	384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ
MD5:	517B55D3688CE9EF1085A3D9632BCB97
SHA1:	2D06C1F823F34C19981C6AE0B0EB0F5861C5E14B
SHA-256:	C541EF06327885A8415BCA8DF6071E14189B4855336DEF4F36DB54BDE8484F36
SHA-512:	08D80845E706A3B9E985B799D3849CD7791AD3BA5AA9D793BB4591D4833890D7299810144874905F416C94D8530DA74BE0EE520066A91ADE05A1DA8BF0CCB498
Malicious:	false
Reputation:	low
Preview:	var QRCode;!function(){function a(a){this.mode=c.MODE_8BIT_BYTE,this.data=a,this.parsedData=[];for(var b=[],d=0,e=this.data.length;e>d;d++){var f=this.data.charCodeAt(d);f>65536?(b[0]=240\|(1835008&f)>>>18,b[1]=128\|(258048&f)>>>12,b[2]=128\|(4032&f)>>>6,b[3]=128\|63&f):f>2048?(b[0]=224\|(61440&f)>>>12,b[1]=128\|(4032&f)>>>6,b[2]=128\|63&f):f>128?(b[0]=192\|(1984&f)>>>6,b[1]=128\|63&f):b[0]=f,this.parsedData=this.parsedData.concat(b)}this.parsedData.length!=this.data.length&&(this.parsedData.unshift(191),this.parsedData.unshift(187),this.parsedData.unshift(239))}function b(a,b){this.typeNumber=a,this.errorCorrectLevel=b,this.modules=null,this.moduleCount=0,this.dataCache=null,this.dataList=[]}function i(a,b){if(void 0==a.length)throw new Error(a.length+"/"+b);for(var c=0;c<a.length&&0==a[c];)c++;this.num=new Array(a.length-c+b);for(var d=0;d<a.length-c;d++)this.num[d]=a[d+c]}function j(a,b){this.totalCount=a,this.dataCount=b}function k(){this.buffer=[],this.length=0}function m(){return"undefine

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2010)
Category:	downloaded
Size (bytes):	6974
Entropy (8bit):	5.036443580484677
Encrypted:	false
SSDEEP:	192:ppOIptlomlfQE+BdttFzwHO6geqUVSIwUlyrr:R2r1Bxjr
MD5:	B0560242A3E6BFA725F3318A6421C2A1
SHA1:	E1E3FCA8BF89A62EC023F11D1E13BCD05A523958
SHA-256:	13971A21E52963922AF2A4CE68153931184B5404DB0DCBB53233E441209AE0EE
SHA-512:	A55E1826FBCDA7138A06547E106C49C1F81BB9618DCC042B5890A665960A91A697E4F88DA024DE5E3EECCA9F9982BF38CB8CA4A577F865E46EF6DA1318A28F91
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/script_33.11.js?16
Preview:	window.mobileAndTabletCheck = function() {. var check = false;. (function(a) {. if (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino\|android\|ipad\|playbook\|silk/i.test(a) \|\| /1207\|6310\|6590\|3gso\|4thp\|50[1-6]i\|770s\|802s\|a wa\|abac\|ac(er\|oo\|s\-)\|ai(ko\|rn)\|al(av\|ca\|co)\|amoi\|an(ex\|ny\|yw)\|aptu\|ar(ch\|go)\|as(te\|us)\|attw\|au(di\|\-m\|r \|s )\|avan\|be(ck\|ll\|nq)\|bi(lb\|rd)\|bl(ac\|az)\|br(e\|v)w\|bumb\|bw\-(n\|u)\|c55\/\|capi\|ccwa\|cdm\-\|cell\|chtm\|cldc\|cmd\-\|co(mp\|nd)\|craw\|da(it\|ll\|ng)\|dbte\|dc\-s\|devi\|dica\|dmob\|do(c\|p)o\|ds(12\|\-d)\|el(49\|ai)\|em(l2\|ul)\|er(ic\|k0)\|esl8\|ez([4-7]0\|os\|wa\|ze)\|fetc\|fly(\-\|_)\|g1 u\|g560\|gene\|gf\-5\|g\-mo\|go(\.w\|od)\|gr(ad\|un)\|haie\|hcit\|hd\-(m\|p\|t)\|hei\-\|hi(pt\|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(2

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	20738
Entropy (8bit):	7.968875449931961
Encrypted:	false
SSDEEP:	384:cSw8AjuSyMUggUuXxza2SMBaPdpG81hwNg3tYuUuG+ka6pV9MQYzBkP29cBe5738:xTousWHOgalpZ1hOObg999MQsB2g5xG
MD5:	9FB32883F40EE0A034DF7D59F369A945
SHA1:	505DB8B3E2657421750A0ED7F8119E783912500D
SHA-256:	A4AE5F0C6BC5B95BAF48A929CA770877169687319EBDD1FB579762EC4B0719BA
SHA-512:	F384BA00C0FEF9201BA38A62328C483F5DBB6CC7DFECDA042BBF48A6864072106D7777161F075FAFE665A70D047D255582C6149F31AFA0DEBEB58FBC956C51AB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""......J....................................................................................9........X..@... . .Y#iF..m....8.,....:l.$....N..H..!]+.F.,.4$...".&...p......h...0..f.MPY<]...g....)>..K.U.....Z4(...M.!.M0.W..Uv\|nV.L..S.{=;.3p=..S..\..S....K.......Y...}.\.j\.W............r.g...'V..B.^.>....y<.7....._9....z.~.w....uz._?...\|...v{...#^..yi.F..oW.\|.......5.....:..GR...........n..V.\.}.:.w'..+.:..^f.#...........9..0.z<.wG......y~.....).1..:.\.j.3W.,..!.3F..6._L.W.k..e..t......n.52..X.e,/...5obWh./T.^.FE;..@....<.....Ec8.z.N..wFq.6....F.Y.SB..dg.U..qp.o..v.cm.....O(....Z.^.q.tuy...U...g..'.h.%....&..7.gA...54/$....4@..!...v....\|..e.F.......l..,..5..</.V........8 ...s.x.F...r....G....K<q...J..n..%~..&bC.h..\..a(j.3rr,.+l(]E.u..f....K..S*.De..Q@....V..&..O.F.d..f......s.B.GU....o..s..Q,.4.wO...z.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.04960668425926551&stid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1385
Entropy (8bit):	7.846362365275968
Encrypted:	false
SSDEEP:	24:XNHx8CTmp2ImR3lFuFHWigckebrxXRx1LkVlyT67IlLVHEJJxpbYrWSRw:XNmHp23/igcLbnLkPCF7kJJx9SW
MD5:	00753EED4E76FDF3B8B06ACC559EB647
SHA1:	D0DF9D07BB8D378AE0F2206B5E3C9C66F085AD2D
SHA-256:	4D500DE93CA12A4F5C44C8E1BD0B8DE713603024CE14CBA632EE4F1841770839
SHA-512:	B42C7A30DCF33CF07C46E896E5507FDD9D1A2A2F3666ECDC4C165D11E801F1745550F509F56BF620DDD24562F535BE5BA5E705DE3A2BD5F0C172A19D489008D1
Malicious:	false
Reputation:	low
Preview:	...........Vas.8..+..!K.....5...n2i.I./QT.C..YR(..c...P.s.....[.....x..,..`:.L..r.w../v..-.\|..u......v4..L.d.).H..Am5...\.r..8. p.LWRU.).Y..L..$..(gNs37........Wg)`E0S....W[V..`F..b.f.5A..Ps...XS.J...Am.s6._8...........Ej&YaR...8O.TKm.Z....l......p\.t......-..U....MJ.\|..4..QV..4a...7<...%.Ue.I..<RN.../.#...."..f....q.4.....qLs9+k.x.......uB....l.,.a.o6l.........?...p.R?.~8..$...6...n.@.xt..q?.q<H......?l.......q.y..vK.g...9v..#6..._...A.=..6"P.Ky.SS..`...w)...^.+...H9.}e.es.x.R.6g.cKi..s\J...P7..&....G....s..?.0.` ..<......{.yqk.H0...K......Q6aO-g...W..O.o..k(...v@......".......i6Y...kWd.].....Wea..x.a.%...[...'.A.5 .'. .........\..n............e...w.K.?..!.c.!.?)D4...#....9.&C.7...E..@k.a.....+.O@P...'=.Y"....q........~.5..>S?z.....lGt%..}.,{./<z..8K.D...c...>.{..K..t.vl...7.<.....(.Cx..#.F{.G.g.>....7..G~o.z.>....ZV.z.F\|.......k..s!x......N...;<...u\|..R>M.Y.P.U^.......9.R..g:.c..f..v.u.....)....,.l[zb.jr.x...s..r#..r."(.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	18607
Entropy (8bit):	7.971518096387488
Encrypted:	false
SSDEEP:	384:5bPtkcMoUUTwI/cm5BspZOAK4MW4qnCpbv377cgSIh51ed:5rtkcY/I0mfmOZRpj377cgxMd
MD5:	D8AA249A66974CE71D09403E5EF1C00D
SHA1:	DC55240AD821D92D99E021FA683403F0AB1A361F
SHA-256:	0D21EC85A3815C9F4001AAC025105E736550AD8EC699EE91D7961B8CC6FEF814
SHA-512:	CD0BE2849AA83DE7BA91F62FCF25010CB7412BB3C9C06BC2184E8919CAE15CF52244FF35D867460ECB56539E3620A675413C6EB06CEC9DDDEB4EE4CB182B4BD0
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg
Preview:	......JFIF...........................................................$ $.5--5@99@QMQjj..............................................$ $.5--5@99@QMQjj.......J...."..........4.................................................................w,.p..<0.p......!8..x..T...5..$..!.,.T.[...8.."`K...q.!...xD..0.7H.....K.10.`...S...N9D..;.m.U.faH.p.!.fjk.......!.=..Q.(.z.D..&Q....p.R....X......dJ{.M..y...D.b..a....h...Tcl.U..Q.....J....,v)j?A.n....=...'.:.AF.>.MR8...7J.aZ...a..J...mh./.~./...O..7rs4..[.{S.W..u./q.i......\|..\|\|.p..^.Zw..p..T...l....Y.d..7z.Y...6.uAN....*q.H.......)..S._eR..y.U=.........8-H.Z....j,I.{...N.JGU..^......Fj.K...3...y.g...Z..E.\.].[m.\..Wik.x.,.EsM..'M..[g.g.e"..R.A..7......7z.t.i.jM.+.?+:...>;.4S.....d.:.._....h...z....zg7...Z......B.......25.o5....B......M..H..'..j..X.H.uX...pn.z.....6f......p...`.)...J.h.R....KC.w...p.q..7eH2....<d..........9...fC.hY......./.u..0\|i.:f.yT.......(.2)1.Xn.k......,..N...4.T~.dy<.+.x....f...']g:gK.fV.E

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	dropped
Size (bytes):	1397
Entropy (8bit):	7.845645040159345
Encrypted:	false
SSDEEP:	24:XxX97Ak4Mj0J/yP4ubqlNUZho6mhst2QTnN8tPGGWrg1FS2jz9bihc0AOXvt/:XpVAk4Mjy/xubiu3ofsgoN8NSYWdh/
MD5:	6BE49FF49C58D6D81FAF666AC92E172E
SHA1:	9A4CF09531294290F139BC04A1CC76C5FB71CDD8
SHA-256:	2DD44E69DD00CF5092B2ED88FD6E4E9C5660D9394F151C99556FBED6E64AD0B3
SHA-512:	17F7DA4533B6C963B0232A7AC26A1038C88DFF79A9FC323AF86EDBFE29E1CCECCE23BDAC26B1CD12F0AB99B100946F431B379BABCDC0DF05F842504AC2D6B99E
Malicious:	false
Reputation:	low
Preview:	..........tV.s.8..W.~8.T-6...\q..4_.I..i~..fd[..#.Y.%....l.............&K...,-r..c&.......A.....N....wi:.lT.....x..I.6)...Z6.......Y?)../.J..t....\|...R..U.+m.s...;...2.,.f...C.1e..].....S;...igZ..`E`TU.T.N.jeO.5y....;A].....,u.&.V...l.....).uj*.\|.i}....3K.".. ..3.&.....L.pR...Ds.V....Y.0b.....cBvU.r.i..I+..f..5d;........^...l.[..<..&......'4.gem..y.o...m.S...\|}d</...)..$R1Y..Kz....<..~..p..q...m.3...q.B..Sv..c<..1...2?.....k..........3.t&.i.....<d.....l.........L......n.........:]...G.LZ.]e..s.x...V...7:...?.3...W.&.[....4i.rg..A...+C0..........`.>..O..(.)...... .'.g..9.....<v.1_C.<.....b.y......7~mM...d..;..tZf.n\|yZ.R+m.7.Fu..@....F.......P.b.s[h+z..h.]D.8.<v'.=. ..%.......f.&...'...nV.h1..C....H..OF ..4...K.^.....R[.r..x..\..........3...o{?.._...\|p.....h.......g...ET.M...."..............l...7.....!(..-.Gz...^8O.....7.......Q.y."...[.Z.3...=]W...>.._..S.,..x... ..p......U....<...........G.W<.T....n..........9..Q.<.l{\|b.nr.~......

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	837
Entropy (8bit):	4.9901091411769505
Encrypted:	false
SSDEEP:	12:UgYMrzgVx+cI0vAREj+U+kvARMFP+U+I05gvS/5wAngEsGFElVxdf35uZu+ZSZLy:ZrzQLQpjBGq/tenJyRWds
MD5:	01DBB17628346710983892B4AE54FE62
SHA1:	E16DD4D2F24D0FC9B0B26C614CCBE3DDAD55AD4F
SHA-256:	205801BF2E8EE4B0E41FCFE6A3B02EB849BF52E4CE0BB605A40B3961CA8326EF
SHA-512:	00A8FAB51104AB64904FBA6F94FAA3D11A76552FEBC4E796509874BD09C7E7059AB1F0A9CB33C75B09CEF7B81484C3D9422F85AA3D09D6B85BB40F4FFAB8862C
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/app_v9.css
Preview:	/* Slider */...slider .bx-controls-direction{..position: absolute;..background: rgba(0, 0, 0, 0.8);..outline: 0;..width: 70px;..height: 99%;..z-index: 15;.}.@media (min-width:1900px) { ...slider .bx-controls-direction{...width: 66px;...height: 100%;..}.}..@media (max-width: 1224px){...slider .bx-controls-direction{...height: 99%;..}.}..@media (max-width: 980px){...slider .bx-controls-direction{...height: 100%;..}.}...slider .bx-controls-direction img{..top: 40%;. margin-left: 10%;. position: absolute;.}...slider .bx-next {. right: 10px;.}...slider .bx-prev {. left: 10px;.}.@media (min-width:1900px) { ...slider .bx-prev{...width: 69px;..}.}....item_slider li {..-webkit-transition: all .4s ease-in-out;..-moz-transition: all .4s ease-in-out;..-o-transition: all .4s ease-in-out;..-ms-transition: all .4s ease-in-out;.}

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48459)
Category:	downloaded
Size (bytes):	587180
Entropy (8bit):	5.321185097931326
Encrypted:	false
SSDEEP:	6144:x4ViwQUn3avGhZPfvIWaiKdsrjMuFbaMcp/dMj7VOLdPOR5ZXN/FSg/:x4ViwQUnKvGhnjMuFbSdd6Sg/
MD5:	BF2968C3512CEBABA30FB57C62990754
SHA1:	7737CBCFD98F38B4ED94C21E235D2A456281D298
SHA-256:	78EC90AEEB78B54C0C38B2011A7908947143B4C5F70123F48F252DCA2510C25E
SHA-512:	31506B22759D1DA0D040DAC3126674A999EE7254C10302099FC21DF5E1336626C01DA5A378017C4C433745C274F5E1A35A03EAF1477EE36C1E82C8ABF2EB0B7A
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/video.js@7.21.1/dist/video.min.js
Preview:	/*. @license. * Video.js 7.21.1 <http://videojs.com/>. * Copyright Brightcove, Inc. <https://www.brightcove.com/>. * Available under Apache License Version 2.0. * <https://github.com/videojs/video.js/blob/main/LICENSE>. . Includes vtt.js <https://github.com/mozilla/vtt.js>. * Available under Apache License Version 2.0. * <https://github.com/mozilla/vtt.js/blob/main/LICENSE>. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).videojs=t()}(this,function(){"use strict";for(var e,u="7.21.1",i={},a=function(e,t){return i[e]=i[e]\|\|[],t&&(i[e]=i[e].concat(t)),i[e]},n=function(e,t){t=a(e).indexOf(t);return!(t<=-1)&&(i[e]=i[e].slice(),i[e].splice(t,1),!0)},l={prefixed:!0},t=[["requestFullscreen","exitFullscreen","fullscreenElement","fullscreenEnabled","fullscreenchange","fullscreenerror","fullscreen"],["webkitRequestFullscreen","webkitExitFullscreen"

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (592)
Category:	downloaded
Size (bytes):	25773
Entropy (8bit):	4.3046758847958975
Encrypted:	false
SSDEEP:	768:zO0gzsKGMuEkiNvn5CNawlR5I0Y5//u7CFG:RNsguPuH
MD5:	9C4596300AF246D887439DCF0FE9B453
SHA1:	B4653E067B2A50F8CDEF1261666113F433A01C21
SHA-256:	E5159CA120B8E16EC544B29D9D32A2A7791D82D5F05C3D8729763EEBE6192791
SHA-512:	7FABDCFDA04F8E32AF556F17071779E61325E55F163B6BB3E3A7E55133A4A7111775319C28152FD33F15DE91F2CAA55F5C08AB78DCC28BDF6DE3C76C01DE85D2
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/share/videojs-social.2.min.js?137
Preview:	/! @name @brightcove/videojs-social @version 3.12.0 @license UNLICENSED / ! function(e, t) {. "object" == typeof exports && "undefined" != typeof module ? module.exports = t(require("video.js"), require("global/document"), require("global/window")) : "function" == typeof define && define.amd ? define(["video.js", "global/document", "global/window"], t) : e.videojsSocial = t(e.videojs, e.document, e.window).}(this, function(e, t, n) {. "use strict";. e = e && e.hasOwnProperty("default") ? e.default : e, t = t && t.hasOwnProperty("default") ? t.default : t, n = n && n.hasOwnProperty("default") ? n.default : n;. var o = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(e) {. return typeof e. } : function(e) {. return e && "function" == typeof Symbol && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e. },. r = function(e, t) {. return "function" == typeof e.usingPlugin ? e

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4103
Entropy (8bit):	4.955879050741023
Encrypted:	false
SSDEEP:	96:7P5bKy3vuM4KP2ZqvuY46KZL2bhW6K6lgEcNrO/hPK:791V6L2bhvnllcNqJPK
MD5:	4FF0B1C1D4CDE111882C3DEF99C0BB6E
SHA1:	BD7F1D63E00E87A20F55960810648F11208FCF34
SHA-256:	21832104A01D3AE4D712A5CF45D9E0EF5CA5A6290A8DD65425EE5DB39DE7688D
SHA-512:	64030854D13E0A960D2FBE62CCA4F073FE7200A58B278076E5F9ED359E49775B2E8DFA02F697F42045935D7135B6AFE3DC6834BBB92220FD1A7A1B671DD8688F
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/jquery.cluetip.css
Preview:	div.ui-cluetip{font-size:1em;}..ui-cluetip-header,..ui-cluetip-content{padding:12px;}..ui-cluetip-header{font-size:1em;margin:0;overflow:hidden;}..cluetip-title .cluetip-close{float:right;position:relative;}..cluetip-close img{border:0;}.#cluetip-waitimage{width:43px;height:11px;position:absolute;background-image:url(../images/wait.png);}..cluetip-arrows{display:none;position:absolute;top:6px !important;left:-11px;width:11px;height:22px;background-repeat:no-repeat;background-position:0 0;border-width:0;}..cluetip-extra{display:none;}..cluetip-default,..cluetip-default .cluetip-outer{background-color:#fff;}..cluetip-default .ui-cluetip-header{background-color:#fff;color:#79C142;font-size:16px;padding:10px 12px;}.div.cluetip-default .cluetip-arrows{border-width:0;background:transparent none;}.div.clue-right-default .cluetip-arrows{background-image:url(../images/arrow-left.png);}.div.clue-left-default .cluetip-arrows{background-image:url(../images/arrow-right.png);left:100%;margin-right:-

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	381
Entropy (8bit):	5.256446190212252
Encrypted:	false
SSDEEP:	6:51btgdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bad513QvuHnmVZkGdDJH10D+xc15C5
MD5:	B162F9881B622D4F387888C46BF99142
SHA1:	2525755A42E9667E0EFCA4224918C1CEF5A812B0
SHA-256:	2E1768265D83AE0CC33BF2D3B23CF49957A0DE2AD8B90C8D81CAEFCB3BE20A52
SHA-512:	379CFE2795DD0FC6F0D7BD515A01F96255B5F6541EE6590DC5C9E25196B87683403D331DE594FDED63BAC2C73FE1BC83CA3B0FF2846DF59C8309168816ED4D79
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=10796";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60542517
Preview:	[]

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1699)
Category:	dropped
Size (bytes):	1769
Entropy (8bit):	5.069701828516376
Encrypted:	false
SSDEEP:	48:rlASHhM5Pp0GPlStXW6NL5fuHWGTq9NEnBLvcA3Qo:pA1PqKlUWCL54WGTMqnBJ3V
MD5:	FAAD0DBC70EB24CFE93DBBA5CD8428BE
SHA1:	F91E1520499F757DE7220950D14DCF51B404BDE6
SHA-256:	6A54D2B545FC694A48AABBEA2FE47512EBA9E15672E8D73DF5DB4048EEB5C6F3
SHA-512:	1D6A9D34B39E7E067E5E92521B3F2098B0DD6D5CF80BA88F5AEBAD33E9F45576141D01ACE5893F919D8756296EBA9F0D67BE7536080DF5A12085557930CCD388
Malicious:	false
Reputation:	low
Preview:	/! @name videojs-seek-buttons @version 1.6.0 @license Apache-2.0 /.!function(o,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],e):(o=o\|\|self).videojsSeekButtons=e(o.videojs)}(this,function(o){"use strict";var e=(o=o&&o.hasOwnProperty("default")?o.default:o).getComponent("Button"),t={forwardIndex:1,backIndex:1},n=o.registerPlugin\|\|o.plugin,r=function(e){var n=this;this.ready(function(){!function(o,e){o.addClass("vjs-seek-buttons"),e.forward&&e.forward>0&&(o.controlBar.seekForward=o.controlBar.addChild("seekButton",{direction:"forward",seconds:e.forward},e.forwardIndex)),e.back&&e.back>0&&(o.controlBar.seekBack=o.controlBar.addChild("seekButton",{direction:"back",seconds:e.back},e.backIndex))}(n,o.mergeOptions(t,e))})};r.VERSION="1.6.0";var s=function(o){var e,t;function n(e,t){var n;return"forward"===(n=o.call(this,e,t)\|\|this).options_.direction?n.controlText(n.louserze("Seek forwar

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	10129
Entropy (8bit):	7.950604495388207
Encrypted:	false
SSDEEP:	192:qEOVkA1/QFX/GfIJExaTL85FUUPWjBIDCv2Tpe9x/lXNQz1euYCDHAWJlZ5r:qEOJ/aef+EkTLA7PWjBDv7nXCiCDHACz
MD5:	66B3544380AF466CC5977139F4DD9589
SHA1:	0A6BBB41B6A6A77925FDA3003CC5BBD362B7E35C
SHA-256:	34A17521384BE4649E8BC1C5B4D623E50CEBA210DBEF8213470F3FFB92E9FF44
SHA-512:	68C9AD555B2C252B3B652E6C955A36FDD15F1112A1BD5BC4FACA9821E4D27F896AC5AD09373BF379DB239FF29E342A45E5EF8933D3BD50BAD1308E4AEAE6F676
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........J...."..........4..................................................................@.@.@.@.@.@.@.@.@.@.@.@.@.@..j.z.:V.VN-.lX.0..[..^Y,-.cm.m..g..ao..,....n..es..L.;. .\.\|..C.q.z..7Z.......L#..+.pi.^.....f..3.[...M\....@'.L.B.s...fn./...]..=.....t.<9Pm?_..r.m'...-.]s.-w.....C9}..)r&..3.L.5.\|u...e.......d:....\|7..7..g...hf...BR..+.y?....3..<v.........3]=....U.s.s..y...U..7Q..<...Smo.?#UE...`_..>...V......UU...3..i.....wD.t...b.....6...r.\...G......Q..7..+......i.L.... .L....]....P.M.("[..~o..s..Jz...>..*..!...qoeBoh..v..c&...5{#...C.....O.m....w..2y.z.StI^.m.Y......j$..-76J....j.W.Qx.pmQ....~....c...I....F.aa.Q.Y4<sX.....5l..}..F=u.V:.w7.../R.o7V[.xy.,....xA..L.V.x.R.....=.-.N........S..tiwaJ........9[...}u....M1>...:..22m6..X..I.NzW..u...9.....L.V.+...r...F..6.....f.f..q.T.O..=.P...

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9716
Entropy (8bit):	4.667533449250915
Encrypted:	false
SSDEEP:	192:IOO3iojYlvQJgcxB0nTPQZbXXTXHTJ4dUzt7odNAP3pkJuO09eW8ma/AQTpGQvJN:h080v5txkl0GPLQLgFio
MD5:	EA54D2A87C6220F6963BD912B06321C6
SHA1:	2B3231FC31FFB072C51C901244AA89C5E1C4BCEF
SHA-256:	BAE0BE00456EA666920477BE254FDCF5104A179CC46135C316A70DDBEE9F8964
SHA-512:	BC234B5B46CE469975F772CAB10D81D6D27763F576B8C0CFE8158C88D412555898C716E234F8A8452FC9AE2660CB1F679C746F05FF672EE2F34ADCDE03592056
Malicious:	false
Reputation:	low
URL:	https://p.dtsan.net/dtsa.js
Preview:	/* eslint-disable no-console /.((window, navigator) => {. const SEC = 1000;. const MIN = SEC 60;. const HOUR = MIN * 60;. const DAY = HOUR * 24;.. const state = {. loadTime: Date.now(),. capabilities: {. beacon: false,. },. user: {},. events: [],. eventsSent: [],. timers: {. idle: null,. },. };. const config = {. debug: true,. endpoint: 'https://a.dtsan.net',. sessionIdleTime: 30 * MIN,. sessionStorageTime: 30 * DAY,. };.. // ----- HELPERS ------. function identifier() {. const str = (Math.random() + 1).toString(36).slice(2, 12);. return `${str}.${Math.floor(Date.now() / 1000)}`;. }.. function friendlyTime(elapsed) {. if (elapsed < SEC) {. return `${elapsed}ms`;. }. if (elapsed < MIN) {. return `${Math.floor(elapsed / 1000)}s`;. }. if (elapsed < HOUR) {. return `${Math.floor(elapsed / 1000 / 60)}m`;. }. return `${Math.floor(elapsed / 1000 / 60 / 60)}h`;. }.. function debugMessage(le

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	25978
Entropy (8bit):	7.967925931729784
Encrypted:	false
SSDEEP:	768:GNDNtQeLuRqv1tEhMWto10aUp9IpgfnVb99IfnoJV:KADBh1to1q9IpgfnVbonov
MD5:	1D9D88059752F575A6B4DA6DA663DE1E
SHA1:	6539250B4596ED4D9AC927160E975997CEF901C7
SHA-256:	AD1260063E6E3CF9E762850F84C21A54ED73C9D32AC8A1562882C1FFA31191AC
SHA-512:	CE64FF915756E0FE67920804884693E670B9B60B6E6F94B7C1BA88D7009147BF4612060F48C5B9A0F7CE176D9E955E9547E424DF8FDC0FBC1A4D00AA418FED60
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12328652996-poster-Carnage-for-Christmas.jpg
Preview:	......JFIF.............C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""......J......................................................................................@@....A@@.AD...Q...Q.........Q.....@..............Q.........Q........Q.......A@.......%V.o....q2.......(.9..Xfg..+Mkj........3..V..j.,. .......W.....^.U.._.!t....j&..]$S...l.S..Q.....ZO..V.[.....M_.....k{<..h..vv)....]p...4......gc.Lk..2.).o3.Z=.."k.."<.5.s...."J-..+"..Z.(z...X..2D.H.or...`O<K.....&.^.....S..s2O@..DydB.%....Ukr(.VMkk.ULH......u\...[96.};E.).s.;...-.Q...o..ZEn.t..Eb....M.nF.......E.r.4Z.._..3:.......g[......7..rm$..+_k.;..........O9....<.Z.ME...9.....+...n.....^..6..r..-..L...^..M....=w...\|.U.#....?..e.....[.=Z...3..(:j.O}44..3....>.6..g.u.N........R2i.$W...W.XZh.OQDi=.{M......5.I._l..zU..1.2IEy~A0....7.K..W..t.a..1.....m.w..#...z...."z.q7..$`.....`.DY...}.....*..-c, i..y{n.y.b

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	16145
Entropy (8bit):	7.967724659261608
Encrypted:	false
SSDEEP:	384:Ww3PkOkFOgd8pvzjn0lH+/wE4bYXzg1A/s//VepnAUCzKj8:Wub1vzLtlY1RV5UUm8
MD5:	20F918BF5CEBB2809D48BF278B87C156
SHA1:	BDF51C30B54766BCE3B7966DFEFF14F866F9B728
SHA-256:	E01BE3F31470F2CC76E4BA914EF6125A16BCFD510825E77A4300404C54726BFE
SHA-512:	A9D3D35546CC676E1B6320998F6AC28FA9AD0C8068D254B337EDA600422C2C537CF3EE897B71130F938149F9EDDE93B6E62EB508274C7A57099165C88C755900
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/1239411900-poster-Back-Home.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......J...."..........6...................................................................d..I$.I$.I$.I$.I{.$.M..q;.g.D.,...vKG...)...+.^J../..RI$.I$.I$.I$...'$.\.:..G.=....`=..>t...s.~.^{i....I$.I$.I$.I$.K..J0.x.3..]-]snem.P2D...?#&.@....H...U?.".$.I$.I$.I/.^........`.18.y..s...3!9*..V...J.+;..@..}......f]..#.U...d...M^.Y.j!.qC....}..^$.K.R ...G>(.J.m....s..B..5...^....o...t.f.Xj....,.U.3^O..K.wu.>......l.....$..R.x..'/.-3....m...G.W.6...ZA._.......N.k.@.>y..v].J....n..y.&6.........}H..v#-.dSf.m}.....i3....m(b...M.td.N.x.F.0...:.nj.7..dU.2).{..P...U.wV>...K.m:6.eG..)........):.;....`....:..eK..I.Q[eVG]d....d:..-1......E"....t........Z$a.u.yGY8.B.M..@z.2Rn}w.!Al1..[.9.(/..2.......Q;.p2.../Y.!.>.0...F16BC.6...[.........^eb..dvY..F...I....[J..0....>.../Hr.....h..[....y{".kF..k...1qll..{ H....F'.k....

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	228727
Entropy (8bit):	5.54655658555566
Encrypted:	false
SSDEEP:	3072:jMFitgcnsmIju+D0VemYasxzuZ1IwPcRCrhl+Phka0Mf3/M9fmCVM1:gYnsmQ8Z1HcRCrjFa0Mf3/M9O
MD5:	5C87C63AB561C48F595C1E9BBAF7F61E
SHA1:	768C7BC5D36240E60872AFBC804558A9E8896537
SHA-256:	9EDF657F616932FBBE963930169864A82BE129423C70D140FBE057D8F0E530D8
SHA-512:	8A2C2AB3BB08FFC3612D3EE43044094E700330DF60041375CC3BBA9D41587FA35E1D8564236AAF526CB2FE4445E4F5DFC1DCDC3BCE8626897ADF375F65DAF648
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	30535
Entropy (8bit):	4.277411210480606
Encrypted:	false
SSDEEP:	384:8qP3JsdXFJslkexaRRGdyafU3WATZydYdTn88kJ1fWEnkMvva5dZsOA0S1BH78n:8qPii30L/WYdTEfnIZDAxBH7G
MD5:	63F6C921381772DE1EE181383D3E187E
SHA1:	6CEAF5B9B0E3E3B15603916EEDF138074431E7A8
SHA-256:	E97B52C253231F341965BAC459F401F155F1032689E2CA160F765B46D3D72003
SHA-512:	8EB27E86CA4D61160A4EEF37B0E82D5F9F756CAC596F5707AAB9537CB9BBA31B584443EF50470C5C66327E0A5DC265DA1491443B9141A6CDE0681E78043DCC28
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/hls.tune.144.js?98
Preview:	. . . function copyVideo(){. var answer = confirm('Copy video to your account?');. if (answer) {. var popupWindow = null;. LeftPosition = (screen.width) ? (screen.width-700)/2 : 0;. TopPosition = (screen.height) ? (screen.height-300)/2 : 0;. settings ='height='+300+',width='+700+',top='+TopPosition+',left='+LeftPosition+',scrollbars=no';. popupWindow = window.open("https://netu.ac/ajax.php?mode=copy_video&vid="+videoid+"&objtype=video",'copyWindow',settings).. }. }. . function retryWithNextSegment(player) {. console.log('retryWithNextSegment');. if (currentLoadingFrag !== null) {. inSegmentErrorRetry = true;. var nextStartPoint = currentLoadingFrag.start + currentLoadingFrag.duration + 1;. console.log('retryWithNextSegment + '+nextStartPoint);.. player.startLoad(nextStartPoint);. //player.recoverMediaError();.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	downloaded
Size (bytes):	1397
Entropy (8bit):	7.845645040159345
Encrypted:	false
SSDEEP:	24:XxX97Ak4Mj0J/yP4ubqlNUZho6mhst2QTnN8tPGGWrg1FS2jz9bihc0AOXvt/:XpVAk4Mjy/xubiu3ofsgoN8NSYWdh/
MD5:	6BE49FF49C58D6D81FAF666AC92E172E
SHA1:	9A4CF09531294290F139BC04A1CC76C5FB71CDD8
SHA-256:	2DD44E69DD00CF5092B2ED88FD6E4E9C5660D9394F151C99556FBED6E64AD0B3
SHA-512:	17F7DA4533B6C963B0232A7AC26A1038C88DFF79A9FC323AF86EDBFE29E1CCECCE23BDAC26B1CD12F0AB99B100946F431B379BABCDC0DF05F842504AC2D6B99E
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1/d/t.dhj?cls=sync&dmn=gomo.to&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=
Preview:	..........tV.s.8..W.~8.T-6...\q..4_.I..i~..fd[..#.Y.%....l.............&K...,-r..c&.......A.....N....wi:.lT.....x..I.6)...Z6.......Y?)../.J..t....\|...R..U.+m.s...;...2.,.f...C.1e..].....S;...igZ..`E`TU.T.N.jeO.5y....;A].....,u.&.V...l.....).uj*.\|.i}....3K.".. ..3.&.....L.pR...Ds.V....Y.0b.....cBvU.r.i..I+..f..5d;........^...l.[..<..&......'4.gem..y.o...m.S...\|}d</...)..$R1Y..Kz....<..~..p..q...m.3...q.B..Sv..c<..1...2?.....k..........3.t&.i.....<d.....l.........L......n.........:]...G.LZ.]e..s.x...V...7:...?.3...W.&.[....4i.rg..A...+C0..........`.>..O..(.)...... .'.g..9.....<v.1_C.<.....b.y......7~mM...d..;..tZf.n\|yZ.R+m.7.Fu..@....F.......P.b.s[h+z..h.]D.8.<v'.=. ..%.......f.&...'...nV.h1..C....H..OF ..4...K.^.....R[.r..x..\..........3...o{?.._...\|p.....h.......g...ET.M...."..............l...7.....!(..-.Gz...^8O.....7.......Q.y."...[.Z.3...=]W...>.._..S.,..x... ..p......U....<...........G.W<.T....n..........9..Q.<.l{\|b.nr.~......

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	28461
Entropy (8bit):	5.04996511430083
Encrypted:	false
SSDEEP:	384:mMtBM7k5OI7Q3ZrhTVmdFK71BrWQlmICQLLIIIvoeDQGROllc5U87RKjXBUY+5/j:m8M75zmKPHlawI9RdqvXDF1P6
MD5:	B240230FBBE16A2EBB3F8F8A4C65427E
SHA1:	66E6C825E69A81A9D0B1F240790680811504C8F2
SHA-256:	340FE3143B21A42EB31A4DDC20E62E26A051D5C6AED0F98B52D4D2173DD7281C
SHA-512:	53E0F6DA1CE96A7E5691E1DE59578540F36B7740719D67CAE362E6B4CE774237A3E1083FAAF08D1C78FAC91DF239584A9382C526738E9AD37907BCC7BC9AAEED
Malicious:	false
Reputation:	low
Preview:	/* eslint-disable spaced-comment */....var damainObj = Array();..damainObj.push('h20sxm');.damainObj.push('k8s1sw');.damainObj.push('nfjser');.damainObj.push('t8hmeu');.damainObj.push('02cln3');.damainObj.push('83n306');.damainObj.push('9idk8z');.damainObj.push('ae72z5');.damainObj.push('f0wcg1');.damainObj.push('vasrol');.damainObj.push('cgutbm');.damainObj.push('g0o9ii');.damainObj.push('39e653');.damainObj.push('hj8pgn');.damainObj.push('fgtj0x');.damainObj.push('vby2x8');.damainObj.push('xew7ry');.damainObj.push('pxz90h');.damainObj.push('bm3zt2');.damainObj.push('h4kwem');.damainObj.push('kj80nh');.damainObj.push('nnj2ux');.damainObj.push('fjans7');.damainObj.push('mxnn4d');.damainObj.push('i222s6');.damainObj.push('ztld8c');.damainObj.push('rxv3kc');.damainObj.push('p17lvf');.damainObj.push('1kcxfo');.damainObj.push('43n4tv');.damainObj.push('ufl0jt');.damainObj.push('5ag23n');.damainObj.push('0kars5');.damainObj.push('nirqpw');.damainObj.push('xkxgkf');.damainObj.push('33h04n');

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://hqq.to/cdn-cgi/trace
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	8341
Entropy (8bit):	5.1738069585230235
Encrypted:	false
SSDEEP:	192:Ju71qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLan55TFkY0yW/GaKdgH:mUIxSymDAZJFDfRLanXTO3ll7
MD5:	EA680BF1934A364697DACF34729A0860
SHA1:	B7DF1D7C495FCEFC6EF9EF8DF535594E53E0DBD5
SHA-256:	DC5CD19EC021DA21384E1B0C557C9AE9CFCEBFE713B6107333D9B2D07FE02B9E
SHA-512:	CAB810CDDB310D5D43C8F90F0B29366E851A391B46DB3202C7AF58551B74702E646D46E9B46F56E4BFEC4F70401E17970EEE04200E64DF5A57F63207FAEA81AA
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "51A0173443272670518C9622FCF8D1A8";. var su = "51A01734432734A2DBA910D21F02614B";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47868)
Category:	dropped
Size (bytes):	150720
Entropy (8bit):	5.2843448448406996
Encrypted:	false
SSDEEP:	3072:NCtJbs49nR2F3HGJCt1+0rrRVkq/jBitc6gVreFmky:NCExHLtN/8y
MD5:	1DFF3885443DE8A2410520E0E75B7E3F
SHA1:	8B6DBE48A86DC0ECFB60FE484AC16DCEFD5B552E
SHA-256:	324FA25CEA14C1670772F7FE8DAE21E50AE419090673710B5E59C717810FFD6B
SHA-512:	3ACD19FCDBB208B8094A21EF586E101E92E66AD57095F115102F8AD0915022495E35FB39ABDC925C7F60DC51B47AAF1D75F8D8A705C9272E04CEF70CD221291E
Malicious:	false
Reputation:	low
Preview:	require=function e(t,n,r){function i(o,a){if(!n[o]){if(!t[o]){var h="function"==typeof require&&require;if(!a&&h)return h(o,!0);if(s)return s(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var c=n[o]={exports:{}};t[o][0].call(c.exports,(function(e){return i(t[o][1][e]\|\|e)}),c,c.exports,e,t,n,r)}return n[o].exports}for(var s="function"==typeof require&&require,o=0;o<r.length;o++)i(r[o]);return i}({1:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.BandwidthApproximator=void 0;const r=15e3;class i{constructor(e,t){this.value=e,this.timeStamp=t}}n.BandwidthApproximator=class{constructor(){this.lastBytes=[],this.currentBytesSum=0,this.lastBandwidth=[],this.addBytes=(e,t)=>{for(this.lastBytes.push(new i(e,t)),this.currentBytesSum+=e;t-this.lastBytes[0].timeStamp>r;)this.currentBytesSum-=this.lastBytes.shift().value;const n=Math.min(r,t);this.lastBandwidth.push(new i(this.currentBytesSum/n,t))},this.getBandwidth=e=>{for(;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.282460356599068&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	18267
Entropy (8bit):	7.974495297282132
Encrypted:	false
SSDEEP:	384:RBWlOahoZKUmY6B9MJnBBQ4Qw7UpXv+VrMhwDl3:zahgKpKBaiUpXOrMhwDl3
MD5:	BB03D394A0F0F51F99DCE0F68D20DF12
SHA1:	C668E78DF50F8EE6C1DBAB90D6C9C3F2E5F6F78B
SHA-256:	6B8E7CF5FC9C19FBC63FD513D7E7D31567CEA123DF4B60E2EAEF21512630D987
SHA-512:	874A3E4E121560940E54E3592B35E60B8EF016C6992162FA0BDDE9B1CE3F41265ACD1FF91AFB34E57137091B71BFC1336BF3EACEEFE897A5DA739A2529F83A72
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................... ...... .#...#.3($$(3;2/2;H@@HZVZvv.............................. ...... .#...#.3($$(3;2/2;H@@HZVZvv.......J...."..........5.....................................................................?KP......&...q.V..K&..tu..d...,...5>"tO...'G..L... ..W...1RQ7.NB.7.zq..H...uB.`..o.....d.\.v~...L.{T..Z)..1.<...J..}......@=..L..zgEG9..,..(...%j..nY...3Y..d.]..d3:..;v/c.R....z.b-.....1....kX=...y.....@..tp{.N.'I.r....1..jzl...>a..~^.D}..=... f.....'VQ.v..`......\|..D.Q..G..6CuN.(.<....x.....\......h..M..i.2FD......:...O+..R.+dP.;.G...p......)..J.o.o..31-}.7,...v.VsI.M6...:..a....s..G..+..<.....,.x..,_$..t.H*b..-..4D3-G?........b$"$...#..&:..'t./..,RJr..[].t?:tO...5}..`..s.5...Y.l...o.Tbt.z...?.t...}!.3Db..'..F..].:.YE!..3...:'.z..e9.........^cx....'.6.u.V.....'.,M.....y..>A...;.Gt.Fu.....tkdmV..@........%U.$j9!......,\..5?u.n....=\...A.q_SP..a..2..4..'o.F..p_......M`.sW>3J.Tk(j..).?\..L...d.j sDO^.yx...'sm..<...u.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.711257694742989
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikQHTRGfwY:IgymGfkQHdGfwY
MD5:	B133A3E25B3ADAF26379A7A1341F5B6B
SHA1:	31AAAFE12706C12F997302A873ECA1C9157DB0E0
SHA-256:	56428FE694AB913819DA842E0CC4F2626DFF0ABF67990B6DBEA93CA206D7A19B
SHA-512:	29875D02686EB72B97BECC10B5A97BD9250FD2685EC29F713F3B9B90A9B29EA4A48C1BCA33A8AC9F80BDCDFA6E032FB60B997DFEC12AD7C237625905AD377ADC
Malicious:	false
Reputation:	low
Preview:	try{_dtspv.c({"b":"chrome@117"},'gmr4');}catch(e){}

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (762), with CRLF line terminators
Category:	downloaded
Size (bytes):	822
Entropy (8bit):	4.72775660279814
Encrypted:	false
SSDEEP:	24:qX2X937dTe9J+ChaXKTPJL82vAGbU7fsR:qGX90bhLps7f2
MD5:	E06051BC94839F3692E133444D863BE9
SHA1:	17EAB31019EB7C3B4208471EBDFB34D0EF71C20B
SHA-256:	18D275E1FFDA4010BDA286E4CEC81A345F02AB34EC336657A7203B6FA424C59E
SHA-512:	DF0B6ADD34255D5448B00BC4DE35ABD70A9421ED6F3AB2BAEE6AFE073C31DF17946B00D73E4C4A13C782FB18AE965E7C32F3661A6123E1EDB9F184510AE65533
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/reset.css
Preview:	./* Eric Meyer's Reset CSS v2.0 - http://cssreset.com */..html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{border:0;font-size:100%;font:inherit;vertical-align:baseline;margin:0;padding:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:none}table{border-collapse:collapse;border-spacing:0}

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	dropped
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32061)
Category:	downloaded
Size (bytes):	84245
Entropy (8bit):	5.369495907619158
Encrypted:	false
SSDEEP:	1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh
MD5:	E40EC2161FE7993196F23C8A07346306
SHA1:	AFB90752E0A90C24B7F724FACA86C5F3D15D1178
SHA-256:	874706B2B1311A0719B5267F7D1CF803057E367E94AE1FF7BF78C5450D30F5D4
SHA-512:	5F57CC757FFF0E9990A72E78F6373F0A24BCE2EDF3C4559F0B6FEF3CF65EDF932C0F3ECA5A35511EA11EABC0A412F1C7563282EC76F6FA005CC59504417159EB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
Preview:	/! jQuery v2.1.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.1",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19040)
Category:	downloaded
Size (bytes):	19359
Entropy (8bit):	5.028640224547321
Encrypted:	false
SSDEEP:	192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc
MD5:	697D69A48E5356F7106E38C09F7F19E0
SHA1:	B57160771FA597A5B56C5B12756C693E4829BE07
SHA-256:	BB9E7DC822C6B7B95A6329932885C72FF2CAF74B243FC1C40ACA0E858123B83E
SHA-512:	898B8BE9B092AC7DCD1EFE0381DB28FB8ED0555419CDAF40BF739EDFB7945F8E301A95E6392677B2564B1F5838A560E6F309394CC46B1BD7B570B6F9312B90E1
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/jquery.bxslider.min.js
Preview:	/*. BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. . Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com. * Written while drinking Belgian ales and listening to jazz. . Released under the MIT license - http://opensource.org/licenses/MIT. */.!function(t){var e={},s={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefaultSwipeY:!1,pager:!0,pagerType:"full",pagerShortSeparator:" / ",pagerSelector:null,buildPager:null,pagerCustom:null,controls:!0,nextText:"Next",prevText:"Prev",nextSelector:null,prevSelector:null,autoControls:!1,startText:"Start",stopText:"Stop",autoControlsCombine:!1,autoControlsSe

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 128
Category:	downloaded
Size (bytes):	26567
Entropy (8bit):	7.877106772849995
Encrypted:	false
SSDEEP:	768:TBMipoAaGLSTx3UblXvH9OR/pdHc/kVP4lse:ii2ec3glX/9Qfglse
MD5:	D4C2FEBA2298A4D376FEA49E62C9429B
SHA1:	2C0F1BB47C3E2916822153770D190473211FE8CD
SHA-256:	57D6555A2586CCF39F833F8B6C9A7059C3112C64A4EC294F1A9BA8A5AFCE0A5C
SHA-512:	6C717FAA69DD0B652C3D131670E8CE9D51C9CAEA35CE97900429D6D04DA910EAE9F637F9EAC0CA3F744C38BE7699F128BD68D1FA061F0CADA5F8A555A69F1F7A
Malicious:	false
Reputation:	low
URL:	https://gomo.to/loading.gif
Preview:	GIF89a.......L..Q..\..n..U..}..Y..o..p..]....._##............u".d-,.#!.'&....!"i23.'(r43.+."!l:9.(,u=>.21.,..()oCC.)$.?@.::.>;.'-.?A.44.89.00{HGuJK./2.?@.CC.,0.LM.9<.LJ~RR.BBzTR.45.RP.JJ.GJ.@B.22.NL.28.II.VW.XX.ML.UU.FE.TW}[^.9=.:7.OL.^\.PR.?B.bc.^^.``.FG.LK.IK.__.LO.hj.NK.RQ.cb.hf.gg.YX.bb.ml.TQ.TW.WV.^_.gh.ih.pr.[[.mo.ee.ut.rp.kj.ab.ca.mm.uw.yv.km.eh.rr.uu.kh.{z.mo.{y..}.sr.po....y{.xv.~..{{....uv.}\|.zy.......}~...........~.................................................................................{~....gg`..}53.26.YY.be.:;.......;@.uu.:;.EB.12.\Z.mms....../0.FF.FE...w./.pp.?A.^^.ECS...PP....UT.PP........................................................................................................................................................................!..NETSCAPE2.0.....!..Created with GIMP.!.......,............k..H......\....#J.H....3j.... C..I...(S.\...0c.I...R8s..i...@..l...'Bo..Yj...B....ZR....h..Uk..Q.R.(....].v...X.e....M..u~..E.#.r..K.@....H...

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	373826
Entropy (8bit):	5.40837025125756
Encrypted:	false
SSDEEP:	6144:qg2vDNaAQsJOEGPkI+le1ysXqJx0eR8h7j/lU:oNQskEGPkVs5qJxgtU
MD5:	08E876ED4E2A180C10B9060328831BC3
SHA1:	9FD990B25BA53DDD3C0E93F6447FCA80F66B2123
SHA-256:	14DA65A959333E16D1406D40E6F2EF65F55D23BD9158BD4EC353BA57B16C78F2
SHA-512:	AACA4A43EBCDB75304AEC4568F85FD9F0F3F07090696612F251ACBF6CCC4D52306AA493FFCA5CD43AC33F349E6B47E93070362D2A4E583893E593E8EE95EAC0C
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/hls.js@1.3.5/dist/hls.min.js
Preview:	"undefined"!=typeof window&&function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Hls=e():t.Hls=e()}(this,(()=>(()=>{var t={21:(t,e,r)=>{"use strict";r.r(e),r.d(e,{default:()=>u});var i=function(){function t(t,e){this.subtle=void 0,this.aesIV=void 0,this.subtle=t,this.aesIV=e}return t.prototype.decrypt=function(t,e){return this.subtle.decrypt({name:"AES-CBC",iv:this.aesIV},e,t)},t}(),n=function(){function t(t,e){this.subtle=void 0,this.key=void 0,this.subtle=t,this.key=e}return t.prototype.expandKey=function(){return this.subtle.importKey("raw",this.key,{name:"AES-CBC"},!1,["encrypt","decrypt"])},t}(),a=r(145),s=function(){function t(){this.rcon=[0,1,2,4,8,16,32,64,128,27,54],this.subMix=[new Uint32Array(256),new Uint32Array(256),new Uint32Array(256),new Uint32Array(256)],this.invSubMix=[new Uint32Array(256),new Uint32Array(256),new Uint32Array(256),new Uint32Array(256)],thi

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (794)
Category:	downloaded
Size (bytes):	9449
Entropy (8bit):	4.253033982008109
Encrypted:	false
SSDEEP:	192:xkv7QP7gDaxBW/fivDaxAktWyi4oyoqNVOOzJWzqFBBiewi6ZmMLW:wUBnUAGT1TgaV
MD5:	02D3A18C66EB0D3A9C943B9CDF68BC46
SHA1:	C5E081069E72DA753AA9848279F9249150193EE5
SHA-256:	D53EC6964B8FD7E12196DCD6D2FD2B53ECAA5FDBC2E51BF05F6DFBA39B19EABE
SHA-512:	B424F4B31D7F0EA6486CDE2C2E76C84817A14CA89636CBCD3AE12297C79D793F9B6EE4433AA8B6C0129A47D8A96B52AE67F9ADD4E5E0EC8D369EC30CD988D271
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/7/asssrt2vtt.18.js?43
Preview:	var setvtttimer = null;..function ass2vtt(ass) {. var re_ass = new RegExp(. 'Dialogue:\\s\\d,' +. '(\\d+:\\d\\d:\\d\\d.\\d\\d),' +. '(\\d+:\\d\\d:\\d\\d.\\d\\d),' +. '([^,]),' +. '([^,]),' +. '(?:[^,],){4}' +. '([\\s\\S])$',. 'i'. );.. function fixTime(time ) {. if (typeof time == 'undefined'). time = '';. return time. .split(/[:.]/). .map(function(item, index, arr) {. if (index === arr.length - 1) {. if (item.length === 1) {. return '.' + item + '00';. } else if (item.length === 2) {. return '.' + item + '0';. }. } else {. if (item.length === 1) {. return (index === 0 ? '0' : ':0') + item;. }. }.. return index === 0 ? item : in

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=c9gd69u&uid=232093305099003581238
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2453)
Category:	downloaded
Size (bytes):	2566
Entropy (8bit):	5.4680998518022985
Encrypted:	false
SSDEEP:	48:FicHJ2ywAR5S/bNoC5S/bEgfVqCYgmi5S/bogI5S/begM5S/bdyvm7L/+w+HA:DHcywALSjNowSjEsqPhQSjorSjeBSjco
MD5:	9D02EAF2E54EBABD8455188A036BA11C
SHA1:	1FAC2AE4BF6448AD309CF67E788548D17DEFB6A4
SHA-256:	D1E296355535DAF937F58C4F00C203A92530054272E0D9074F01C94C6FF8FC90
SHA-512:	B29AA389AD15FD0362BECAD69EEE085C43CDC457DB056EDC22008397761E613E0189D1472FBB955A4C61CB6BD46CEB3A661BC17AF38A6F1876EDFFB1DBB799AB
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/videojs-mobile-ui@0.4.1/dist/videojs-mobile-ui.css
Preview:	/*. videojs-mobile-ui. * @version 0.4.1. * @copyright 2018 mister-ben <git@misterben.me>. * @license MIT. */.@keyframes fadeAndScale{0%{opacity:0}25%{opacity:1}100%{opacity:0}}.video-js.vjs-has-started .vjs-touch-overlay{position:absolute;pointer-events:auto;top:0}.video-js .vjs-touch-overlay{display:block;width:100%;height:100%;pointer-events:none}.video-js .vjs-touch-overlay.skip{opacity:0;animation:fadeAndScale 0.6s linear;background-repeat:no-repeat;background-position:80% center;background-size:10%;background-image:url('data:image/svg+xml;utf8,<svg fill="%23FFFFFF" height="24" viewBox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"><path d="M4 18l8.5-6L4 6v12zm9-12v12l8.5-6L13 6z"/><path d="M0 0h24v24H0z" fill="none"/></svg>')}.video-js .vjs-touch-overlay.skip.reverse{background-position:20% center;background-image:url('data:image/svg+xml;utf8,<svg fill="%23FFFFFF" height="24" viewBox="0 0 24 24" width="24" xmlns="http://www.w3.org/2000/svg"><path d="M11 18V6l-8.5 6 8

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=11040624
Preview:	[]

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	19184
Entropy (8bit):	7.973257966811769
Encrypted:	false
SSDEEP:	384:TqUV6gxGAvG1A4WD6TNdGy1jIZe/s2/yaRuFVBTm2btPoQ:eUAMcxWWTPbfUNnlm2btPoQ
MD5:	43B674D917C067CA439A0B2DBE2C1A48
SHA1:	4F0335241837C9DC1301A7507D6F120DEBBDC9A7
SHA-256:	C88D8299AA0CCA38C379A2DB9BE2D748E0ECD4F8788A558DACCFA407D9B92A3D
SHA-512:	CD869F2A47FF96EC77EEA04334E7A7B80AC02CF119CDF6309C9DB571B5ACE4A84BBCA4DF99BF032D035996724D7119EDCC34B1F432E8BCEAA3DA630102D80E7D
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................'......'#" "#>1++1>H<9<HWNNWmhm................................'......'#" "#>1++1>H<9<HWNNWmhm.........J...............5.....................................................................C.....@.pp@.....C!..`@.@.`C'J.1!4..I2L..........pCd0..b.......C.....B x......=6=..C.4K"....\|.A.!.....N.."..xO.g.u..7F..C..}....9....4....M.3;\...l...]f.c..4k!aU..wR..1..m=.cY..7...v;.C(.i4.....z\|..\.$..B!^g..\|.Ay.Y!1....@......1.M.h.(.....;....r..i.L]........2T.H...f..DX9...?..U..N.,[.h..;.Z-Tq.L.......OS..n.]..]#'...}T.7i.Y.p...........\|Z...sd.......b.:...l......Y...@cac:..<.p.. "a..5.\|.>...F.qZ..5.3h.t.2.p4.)I....]s.7....cz\..C..#...j..f....@..G..#&.2.........unr...Y.Y~.#.~V....\|.!g..4;D.E.4.X.@..0..Fv..........9~.4..!..-s.M.Y...L...X..M.......qT..C...{.l...........w9t.N"..4.HH...[y...f...:F.]._W.9u...h1............Ld'..i.@,...[5.......N.6.D .#...a....}c..k.?V.Zo..L..F..^..s........A..[......yN.)....]4

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.6897037321995474
Encrypted:	false
SSDEEP:	3:oHJKlGqQn:opKl7Q
MD5:	533A813DDB8F84D7E018BF8E6296C44D
SHA1:	8C95AF23D5DC502F1BC3395A6D2E339E696C0D3E
SHA-256:	A499068CF858AA2CD9B077E2E354B6BF8435EAA8E44C2047F403C7283031977F
SHA-512:	2187D4F5AB6F146A4B70F9FE9560FC24DB3B133F9C695DDE9E0B23835DE14BAC894D0C9A8DA643A31C6AAECBDE2CDB84240DBB9BFBC6BCD3DA3FABBD83ABBF62
Malicious:	false
Reputation:	low
URL:	https://hqq.to/ad/top/popunder.js
Preview:	adblockcheck = false;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3437243107694521964&pt=43e7a474-a419-4060-8143-88849fca883d%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	30535
Entropy (8bit):	4.277411210480606
Encrypted:	false
SSDEEP:	384:8qP3JsdXFJslkexaRRGdyafU3WATZydYdTn88kJ1fWEnkMvva5dZsOA0S1BH78n:8qPii30L/WYdTEfnIZDAxBH7G
MD5:	63F6C921381772DE1EE181383D3E187E
SHA1:	6CEAF5B9B0E3E3B15603916EEDF138074431E7A8
SHA-256:	E97B52C253231F341965BAC459F401F155F1032689E2CA160F765B46D3D72003
SHA-512:	8EB27E86CA4D61160A4EEF37B0E82D5F9F756CAC596F5707AAB9537CB9BBA31B584443EF50470C5C66327E0A5DC265DA1491443B9141A6CDE0681E78043DCC28
Malicious:	false
Reputation:	low
Preview:	. . . function copyVideo(){. var answer = confirm('Copy video to your account?');. if (answer) {. var popupWindow = null;. LeftPosition = (screen.width) ? (screen.width-700)/2 : 0;. TopPosition = (screen.height) ? (screen.height-300)/2 : 0;. settings ='height='+300+',width='+700+',top='+TopPosition+',left='+LeftPosition+',scrollbars=no';. popupWindow = window.open("https://netu.ac/ajax.php?mode=copy_video&vid="+videoid+"&objtype=video",'copyWindow',settings).. }. }. . function retryWithNextSegment(player) {. console.log('retryWithNextSegment');. if (currentLoadingFrag !== null) {. inSegmentErrorRetry = true;. var nextStartPoint = currentLoadingFrag.start + currentLoadingFrag.duration + 1;. console.log('retryWithNextSegment + '+nextStartPoint);.. player.startLoad(nextStartPoint);. //player.recoverMediaError();.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	21006
Entropy (8bit):	7.9730659449121335
Encrypted:	false
SSDEEP:	384:bg304wpnMqXG1JgAhwcLmhIjLhxHpMJS60Uv5DpvxMymnp4ahqG/BT9b:bSYMTZxLmhcfp2X35VYpt55pb
MD5:	55F1E75D82AD062F4B884B6E751538D0
SHA1:	56405AB14582F3EBA06849962E2AB83314A7B542
SHA-256:	EC13F2C3D96878D3BE9A9810BD8A449C7B4834425C390C203B05D56D483CD5A9
SHA-512:	89301ED860E74677C0153689EBB3F3177DBAECA479F665962366D9CBDF33E85073D56D89FC09F2F4A444714651FE5DD374E5452CE23F3A4FB0D563BD8A263B82
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12320562862-poster-Bigfoot-vs-Krampus.jpg
Preview:	......JFIF...........................................................$ $.5--5@99@QMQjj..............................................$ $.5--5@99@QMQjj.......J...."..........7....................................................................v[..V.qc.......3o....4...2....k.......$wk.@.w.k....5z.bHB.jy...1.n.e........x.$0..N...M.0X.v..y..b.4..a..imk.+H....x.D....W._..'.g.f;;.o.....B...(..../.4..v~......&.h..U..&.!.....G.8Q...u.......@..~.....,.:c..`...L..fAZ.......\|P,u....Z.Y.my"'.]M.K..>..O......F..b...]?...=.qu.cS.i.+.+..1......+.Sl...yj.eEp./...>....0..,.T.s.....7M..U{P....%..&,..."4^.&{iT.....DMLp...Q.Ss....b.Eo..W...y..w..".....U..q.<W........s.k3.M\|...`.ns.x.3v....m]...{.Q..O..K.P..?....%0.h........[.{Ub....5...nt.K..m......dTY..-.8.V{.,.&P...........UwO..........1..4...4...m;..v..v...F.q.>.n...:.p}jw.......l7J..*..=G.../.,u=.CAD.#6.M..a...........9N...dv......c./5mS..iw]]......"s.ny}..KHg_y.~x2..89..J...,.^M.a.}..\.Y.f.;.....Aa'...U.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	14640
Entropy (8bit):	7.964045439554416
Encrypted:	false
SSDEEP:	384:o/SDAUzs7bTiDHP9nHCzfQspuWea66jfE3Izf:YosriDv8zfI36jfEYT
MD5:	EDF915203EFD1A3559EE134D2A764249
SHA1:	25C5711071F9DEDBB04AE47DE03DEFBE6C4C4869
SHA-256:	D2BBE054BB89D835D39C7879055098F1B80EA0F495C71E453141EF5196C52C18
SHA-512:	340B4330687C121E80314A0AEEB642528A89920725C24C3C26D38936FD8E9B6CBC73DF1944C819562F4C6AD349B7CEFEEA1B1416F53642C18AA0555EE126C38B
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................'......'#" "#>1++1>H<9<HWNNWmhm................................'......'#" "#>1++1>H<9<HWNNWmhm.........J...."..........4.................................................................._[.S:d.K8.?K..d.B.....j.t....m...d.].(.9.sX.H$..i.,.^....`..\|....wc.........".\|..>..h..D....K..l...1..7..^..@.e...q=\.<.....[S.[UYF...\.S......?....H...."..2.".m..i.....0>u._\|.\..R.%hvE.k!4....l..O!d...S.E.,..Av.!..:F..>..E..0...S..>..u$.kN.t...#.1G%H.:..^x.z.I.E....t...0..3.*.T... .........Iu0...h...6.....q.~.@PsO.A..b.z..+:.......e?..Re.Yx......_.C.].9..o2...CLJ.:...k..\5cccg..\.@.P].O;....?B..M..g...y...j.>x...u(..a...:o3.HG~..8X.Uzk..h.N6.O2..]k."..`...T...Py'....w3)\|....u$.E...Y.:;r.7E...3...(~....7.g..5y!.,.s..o.}N.....C.h..W.....D.f`.)..-/U{.C).[_.9.-.k.+....Di....y..j.....v.......'..+.{.g>...^m.x...t....n...6..,......>M.}...J.5...C..D\...#%.P.u.F..G...Z..z.../.y].9.}.3.e..m.)YL.....".$r...6......1.-

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/eyeota?uid=2418uVLiea7JtkNGiYlcOpgBZTZ0rwWAyxUI2hSKvgVA&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
URL:	https://s10.histats.com/js15_as.js
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	228727
Entropy (8bit):	5.546402301668774
Encrypted:	false
SSDEEP:	3072:jMFitgcnsmIje+D0VemYasxzuZ1IwPcRCrhl+Phka0Mf3/M9fmCVM1:gYnsmQsZ1HcRCrjFa0Mf3/M9O
MD5:	3AD5C9BDC1138CE0BD4004FDD926B536
SHA1:	6CF791BF2871066AADD5E9074AD400DD27D298BC
SHA-256:	5F17DE44AF5586A609C0ED80C571C938ADB5BEA38B1EF2B47342F721960E3584
SHA-512:	7046B681E3D6CB0396CC477AB77930E5E0D16F0ED90D78FEA515CB50197065F104441777B8FDB635D16D433286C48FA3AFE8E93AA2FA88F71F287E05EE8D7903
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-156493615-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7033)
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	5.128667399130621
Encrypted:	false
SSDEEP:	96:iPV6GqKyR6TYATHF/suCvp5OVEE1f3e1gJ1IHImBaokbl:iPVfSWFsuCnOVEEd3eiJmHILoe
MD5:	40D8385730E212732209B2268EE704C4
SHA1:	8D1FDEEFF2D5319719D1EE26DDB49086F532D6ED
SHA-256:	914153D308670B304CC3D167B82BED9F7E6A3923E7AE9EDA46FE87DAC9040C86
SHA-512:	55D4B3FEA43CBA8EF3DC21710377E0CE1F679E14C1D0274A7C14E2652CD1FE7037B09750EE4CAF9020B4247C4AEE150031EDF1C8771A17F74405B3F466D7B1F3
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/wow.min.js
Preview:	/! WOW - v1.0.2 - 2014-09-24. Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[b]===a)return b;return-1};b=function(){function a(){}return a.prototype.extend=function(a,b){var c,d;for(c in b)d=b[c],null==a[c]&&(a[c]=d);return a},a.prototype.isMobile=function(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)},a.prototype.addEvent=function(a,b,c){return null!=a.addEventListener?a.addEventListener(b,c,!1):null!=a.attachEvent?a.attachEvent("on"+b,c):a[b]=c},a.prototype.removeEvent=function(a,b,c){return null!=a.removeEventListener?a.removeEventListener(b,c,!1):null!=a.detachEvent?a.detachEvent("on"+b,c):delete a[b]},a.prototype.innerHeight=function(){return"innerHeight"in window?window.innerHeight:document.documentElement.clientHeight},a}(),c=this.WeakMap\|\|this.MozWeakMap\|\|(c=function(

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=J2KMAQZHBi96bc9jRXet1Ayp
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
Preview:	(function(){})()

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	downloaded
Size (bytes):	19184
Entropy (8bit):	7.973257966811769
Encrypted:	false
SSDEEP:	384:TqUV6gxGAvG1A4WD6TNdGy1jIZe/s2/yaRuFVBTm2btPoQ:eUAMcxWWTPbfUNnlm2btPoQ
MD5:	43B674D917C067CA439A0B2DBE2C1A48
SHA1:	4F0335241837C9DC1301A7507D6F120DEBBDC9A7
SHA-256:	C88D8299AA0CCA38C379A2DB9BE2D748E0ECD4F8788A558DACCFA407D9B92A3D
SHA-512:	CD869F2A47FF96EC77EEA04334E7A7B80AC02CF119CDF6309C9DB571B5ACE4A84BBCA4DF99BF032D035996724D7119EDCC34B1F432E8BCEAA3DA630102D80E7D
Malicious:	false
Reputation:	low
URL:	https://123images.co/movies/12327191509-poster-Martingale.jpg
Preview:	......JFIF...........................................'......'#" "#>1++1>H<9<HWNNWmhm................................'......'#" "#>1++1>H<9<HWNNWmhm.........J...............5.....................................................................C.....@.pp@.....C!..`@.@.`C'J.1!4..I2L..........pCd0..b.......C.....B x......=6=..C.4K"....\|.A.!.....N.."..xO.g.u..7F..C..}....9....4....M.3;\...l...]f.c..4k!aU..wR..1..m=.cY..7...v;.C(.i4.....z\|..\.$..B!^g..\|.Ay.Y!1....@......1.M.h.(.....;....r..i.L]........2T.H...f..DX9...?..U..N.,[.h..;.Z-Tq.L.......OS..n.]..]#'...}T.7i.Y.p...........\|Z...sd.......b.:...l......Y...@cac:..<.p.. "a..5.\|.>...F.qZ..5.3h.t.2.p4.)I....]s.7....cz\..C..#...j..f....@..G..#&.2.........unr...Y.Y~.#.~V....\|.!g..4;D.E.4.X.@..0..Fv..........9~.4..!..-s.M.Y...L...X..M.......qT..C...{.l...........w9t.N"..4.HH...[y...f...:F.]._W.9u...h1............Ld'..i.@,...[5.......N.6.D .#...a....}c..k.?V.Zo..L..F..^..s........A..[......yN.)....]4

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HEzthPscrj:w19n
MD5:	73736A39136466B6EB51A47F6275ACE0
SHA1:	B9C78EEDD8406B18882E211A839C4B41407FA3A5
SHA-256:	C8B778E72885A33A0D22F315AE0A498E779E23C9CE434973385B7CE5CE75020F
SHA-512:	F82E9E19514B5459227FBBD46C88A7EB5515B7537F871DE713DAE49C305BD7E9FD4169A03BDE109C26BB93122F3A53D85745C37ED2EDE2B573ED1B897C509287
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmRTMU0PAqRThIFDQKP-2gSEAlbLHgo64PYtxIFDXS3I9k=?alt=proto
Preview:	CgkKBw0Cj/toGgAKCQoHDXS3I9kaAA==

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3121
Entropy (8bit):	5.078590661266263
Encrypted:	false
SSDEEP:	96:GhItyVx2cgHppvb6LhoBIN0/ZljDKVQpF:GKyjvgHK+1ZsSF
MD5:	D5528DDE0006C78BE04817327C2F9B6F
SHA1:	31E1BCC4CF805A2C2FEE21F48DED1E598F64A2A8
SHA-256:	B84161C9FBF7520CD14E7019F92120BD87A928A074156E91A992EBA9FC9436E8
SHA-512:	69484BDB1382AE92C4B860F97FAB601DB2D8117469619F06E720FE5A516B5EB3F2D88AD6065BBA6E28790BD1FAA86B20AA753A9A0C7A2AD53C4EB787A404A9AF
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Cookie Plugin v1.4.1. * https://github.com/carhartl/jquery-cookie. . Copyright 2013 Klaus Hartl. * Released under the MIT license. */.(function (factory) {..if (typeof define === 'function' && define.amd) {...// AMD...define(['jquery'], factory);..} else if (typeof exports === 'object') {...// CommonJS...factory(require('jquery'));..} else {...// Browser globals...factory(jQuery);..}.}(function ($) {...var pluses = /\+/g;...function encode(s) {...return config.raw ? s : encodeURIComponent(s);..}...function decode(s) {...return config.raw ? s : decodeURIComponent(s);..}...function stringifyCookieValue(value) {...return encode(config.json ? JSON.stringify(value) : String(value));..}...function parseCookieValue(s) {...if (s.indexOf('"') === 0) {....// This is a quoted cookie as according to RFC2068, unescape.......s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\');...}....try {....// Replace server-side written pluses with spaces.....// If we can't decode the

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 56780, version 4.197
Category:	downloaded
Size (bytes):	56780
Entropy (8bit):	7.995500466415841
Encrypted:	true
SSDEEP:	1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE
MD5:	97493D3F11C0A3BD5CBD959F5D19B699
SHA1:	1075231650F579955905BB2F6527148A8E2B4B16
SHA-256:	AADC3580D2B64FF5A7E6F1425587DB4E8B033EFCBF8F5C332CA52A5ED580C87C
SHA-512:	BFE4679BBE5D1DB21F6ECB2D6C2810DD02D3B698EFDD50004CC355C1D0BC51DE8DD102707C796B26E8250C600B4B64DB88B67D3F28157777B68E36AD7930BFC0
Malicious:	false
Reputation:	low
URL:	https://alluc.co/css/fonts/fontawesome-webfont.woff2?v=4.3.0
Preview:	wOF2...................l........................?FFTM....`..B.....d..Z.6.$....\.. ......?webf.[..q.q{!Q.P.........DA..n..\|1.......... Y.....G@Tu:K[U3....,...G.^.c(p.6b.l.f-k.n...G5..T+3..i...Lp&..el'...\|.&...D!.^fivM3\S).Q..L..N_.+[.!.S...mQ.}..V.o..k.....(.....1AR.]A..P.m.......bN.sEP..7d\|8~E.x..i..k......._.)..j.PK.:t.....=z.&.wd.....-..S..k-{=.....<..@..<....R...>......"..6bc.1..._..Q!.BRZ.$Z%%.@.lTT...(g..uf.7.?..g?..1<......V .w.J.s..]..j]7nj....}.2.......J\|..j."...>t!.1.. 9.c...y...../+..S..$.I...i..`.PJ...I....:....I.I.IJ.,.....6...Q.e..1.w..^.T~oJ..&.....-.....Z.,K.b..b..J..g...9.1...C.I....3.j.H...@t_d..;.'~..9.....9.~%$.H..h..).~.......v...$....G.NL.B .R.J9..<.k..k......2D....i.V.~...P...!..+.i.r.{wOh.+.j..p..I'..{.......I.ZPt....s.....oY..s..#zT........V...`cc.`Do....&.'ST<1P....4.N.P...f..1.bzBz....o..x.V.......xw._.3..Lms..C....1.:..h.x..%....[.*[/.t..p..>..g73..#......K..7.Vs..8....u....x-.nkJ.U...z...........h.[ll4..S...E..

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	228209
Entropy (8bit):	5.544991535538312
Encrypted:	false
SSDEEP:	3072:WMFitgcnsmIj5+D0uemYasxzuZ1IwPcRCrhl+Phka0Mf3/M9fmCVM1:dYnsmQWZ1HcRCrjFa0Mf3/M9O
MD5:	3B27BCB5A114BEE29B62F4BB936053AD
SHA1:	342E644543F76408D14AAEADCF8D81DB0D39AB17
SHA-256:	AEDA6BA7EFF25E70CA86ACA7ADEA086D8B2CB83CBA6CC68C168504A0D312C44A
SHA-512:	0C176ECCB71961CA533395E9AE5BE70F64F1708997DCF285624832699336E1A54AF6976168DDB0F2EFAB0C6442578F4B99BBD01D87B80E05A1B5190AB575792A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-153655914-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-153655914-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-153655914-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-NHEWQEEJWW"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-153655914-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x330, components 3
Category:	dropped
Size (bytes):	21006
Entropy (8bit):	7.9730659449121335
Encrypted:	false
SSDEEP:	384:bg304wpnMqXG1JgAhwcLmhIjLhxHpMJS60Uv5DpvxMymnp4ahqG/BT9b:bSYMTZxLmhcfp2X35VYpt55pb
MD5:	55F1E75D82AD062F4B884B6E751538D0
SHA1:	56405AB14582F3EBA06849962E2AB83314A7B542
SHA-256:	EC13F2C3D96878D3BE9A9810BD8A449C7B4834425C390C203B05D56D483CD5A9
SHA-512:	89301ED860E74677C0153689EBB3F3177DBAECA479F665962366D9CBDF33E85073D56D89FC09F2F4A444714651FE5DD374E5452CE23F3A4FB0D563BD8A263B82
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................$ $.5--5@99@QMQjj..............................................$ $.5--5@99@QMQjj.......J...."..........7....................................................................v[..V.qc.......3o....4...2....k.......$wk.@.w.k....5z.bHB.jy...1.n.e........x.$0..N...M.0X.v..y..b.4..a..imk.+H....x.D....W._..'.g.f;;.o.....B...(..../.4..v~......&.h..U..&.!.....G.8Q...u.......@..~.....,.:c..`...L..fAZ.......\|P,u....Z.Y.my"'.]M.K..>..O......F..b...]?...=.qu.cS.i.+.+..1......+.Sl...yj.eEp./...>....0..,.T.s.....7M..U{P....%..&,..."4^.&{iT.....DMLp...Q.Ss....b.Eo..W...y..w..".....U..q.<W........s.k3.M\|...`.ns.x.3v....m]...{.Q..O..K.P..?....%0.h........[.{Ub....5...nt.K..m......dTY..-.8.V{.,.&P...........UwO..........1..4...4...m;..v..v...F.q.>.n...:.p}jw.......l7J..*..=G.../.,u=.CAD.#6.M..a...........9N...dv......c./5mS..iw]]......"s.ny}..KHg_y.~x2..89..J...,.^M.a.}..\.Y.f.;.....Aa'...U.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (347)
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	4.88920291814259
Encrypted:	false
SSDEEP:	12:aKEvbN3k45JRclJcaGprZ3RKEvpwqrTfJsZFYF/T/LFYKBC:ubN3Nul2aG7dpLls7KTC
MD5:	450F47FEA0A71C0D8478A563D14EDF8E
SHA1:	8A742221CE43035C11CDECB6BBE7C9D1A77C7531
SHA-256:	0052AFFFB2B0902DF27DA5BA7AA3BB65863994DA1B822E7FCB39BC05CC5FD4AA
SHA-512:	B2E9DE65A5D23AC61B910AE313A5AC8C74FA7D971B62F1667A87447009522D880EDBE5B81BCF7B69BE2723BF3751C0C2C442BE6BF4240C38ED76C7A59A550C24
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/airplay/videojs-airplay-master/dist/videojs.airplay.css
Preview:	@font-face { font-family: 'videojs-airplayButton'; src: url("fonts/airplayButton.eot"); src: url("fonts/airplayButton.eot?#iefix") format("embedded-opentype"), url("fonts/airplayButton.ttf") format("truetype"), url("fonts/airplayButton.woff") format("woff"), url("fonts/airplayButton.svg") format("svg"); font-weight: normal; font-style: normal; }...vjs-airplay-control { font-family: 'videojs-airplayButton'; float: right; cursor: pointer; }...vjs-airplay-control:before, .vjs-v6 .vjs-airplay-control .vjs-icon-placeholder::before { content: "\e900"; }...vjs-v6 .vjs-airplay-control:before { content: none; }.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	273580
Entropy (8bit):	5.575094997210108
Encrypted:	false
SSDEEP:	6144:UDYnsmQ8L2Z1HcRCriua0Mf3/BrfduT+boG:Unm9L27Hc8KoG
MD5:	3CCB678738A25440D8A1C25368342BCB
SHA1:	975D3F9489A8F0362166A3EFCCCFF4EEC59FD3CD
SHA-256:	7B7164B21A6CFE29EFDE2A5B7870583BE12BA0715D5EEBBE9AAEA506180F019F
SHA-512:	398A668FACA52BB59FF649AA611E06ACDA95A123A1DE26E63D1D6AE034D6DB3FC3EC06D3C8B78F182B954BCEA986599B2E08FA361A7DD07CC559491AF783A921
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":5,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":5,"vtp_includeConditions":["list","alluc\\.co"],"tag_id":12},{"function":"__ogt_session_timeout","priority":5,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","v

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1520)
Category:	downloaded
Size (bytes):	2289
Entropy (8bit):	4.829801924999114
Encrypted:	false
SSDEEP:	48:5aNm92Q/6TNg+gB29t/xEX6tRpwLwmrr+t:5aNmUQ/iKf09t/xEX6pwZrr+t
MD5:	E3E77EAF250FE8B7E5C62820E4474444
SHA1:	C465A13AA43A3561B378BBDC3DD707224DE703B1
SHA-256:	4112565D1E851966D0DB09B368C82076F63C06BBA7F0F135233B4ED65305F517
SHA-512:	61C9E30387D96B49A7029487D68ABA2FD43B5C532BEF40D7AF2555DE0AA0F61CAB2ED61784DB246D04BA6B0079ADBFBFD0503DA4A0A86039A0448D4D390BB1AA
Malicious:	false
Reputation:	low
URL:	https://hqq.to/js/video.js/pip/pip.css?23
Preview:	/@font-face { font-family: 'videojs-pipButton'; src: url("fonts/pipButton.eot"); src: url("fonts/pipButton.eot?#iefix") format("embedded-opentype"), url("fonts/pipButton.ttf") format("truetype"), url("fonts/pipButton.woff") format("woff"), url("fonts/pipButton.svg") format("svg"); font-weight: normal; font-style: normal; }/.@font-face {. font-family: 'videojs-pipButton';. src: url(data:application/font-ttf;charset=utf-8;base64,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

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	downloaded
Size (bytes):	95786
Entropy (8bit):	5.393689635062045
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB
MD5:	8101D596B2B8FA35FE3A634EA342D7C3
SHA1:	D6C1F41972DE07B09BFA63D2E50F9AB41EC372BD
SHA-256:	540BC6DEC1DD4B92EA4D3FB903F69EABF6D919AFD48F4E312B163C28CFF0F441
SHA-512:	9E1634EB02AB6ACDFD95BF6544EEFA278DFDEC21F55E94522DF2C949FB537A8DFEAB6BCFECF69E6C82C7F53A87F864699CE85F0068EE60C56655339927EEBCDB
Malicious:	false
Reputation:	low
URL:	https://alluc.co/js/jquery-1.11.1.min.js
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T11:52:26.716774+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	50093	34.111.113.62	443	TCP
2024-12-17T11:52:37.315534+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	50145	37.252.171.53	443	TCP
2024-12-17T11:52:55.035696+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	50198	67.202.105.23	443	TCP
2024-12-17T11:52:57.395893+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.16	50210	52.87.7.90	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 11:51:01.026400089 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:01.635891914 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:02.836466074 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:05.247478008 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:07.194911957 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.194953918 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:07.195030928 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.195295095 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.195353031 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:07.195446014 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.195734024 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.195748091 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:07.196238995 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:07.196259975 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.411055088 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.411324978 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.411341906 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.412417889 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.412475109 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.413642883 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.413892031 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.413919926 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.414964914 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.415028095 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.415887117 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.415923119 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.415950060 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.416039944 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416054964 CET	443	49700	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.416069984 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416095972 CET	49700	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416425943 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416455984 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.416507959 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416749954 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416759968 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.416866064 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416882038 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416913033 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.416970968 CET	443	49701	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.417018890 CET	49701	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.417226076 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.417253017 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.417306900 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.417481899 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:08.417490959 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:08.884175062 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:09.185492992 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:09.632494926 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.632555008 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.632790089 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.632819891 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.632930994 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.632961035 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.633903980 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.633996010 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.634017944 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.634088039 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.635103941 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.635176897 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.635291100 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.635385036 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.635401011 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.635415077 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.688467979 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.688483953 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.688500881 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:09.736473083 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:09.800501108 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:10.055533886 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:10.170921087 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.199158907 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.199237108 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.199269056 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.202462912 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.202600002 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.202887058 CET	443	49703	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.202953100 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.202975035 CET	49703	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.205010891 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.251332998 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.434117079 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:10.434148073 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:10.434225082 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:10.434897900 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:10.434904099 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:10.540296078 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540369987 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540395975 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540424109 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540451050 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540465117 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.540496111 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.540508986 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.540549994 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.540808916 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549217939 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549258947 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549289942 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.549316883 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549357891 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549366951 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.549416065 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.549422026 CET	443	49702	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.549451113 CET	49702	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.590250015 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.590301991 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:10.590589046 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.591010094 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:10.591025114 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.012468100 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:11.300614119 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:11.300683975 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:11.300800085 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:11.301053047 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:11.301074982 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:11.651375055 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:11.651848078 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.651868105 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:11.652952909 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:11.653038979 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.654191971 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.654262066 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.654289961 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:11.699728966 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.699754000 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:11.747478962 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:11.801038980 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.801323891 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.801335096 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.802474976 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.802551031 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.802898884 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.802922964 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.802972078 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.803014994 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803169012 CET	443	49706	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.803250074 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803250074 CET	49706	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803289890 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803335905 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:11.803428888 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803606987 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:11.803620100 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:12.109803915 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:12.109904051 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:12.109999895 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:12.110234022 CET	49705	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:12.110254049 CET	443	49705	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:12.110817909 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:12.110869884 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:12.110979080 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:12.111248016 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:12.111260891 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:12.997899055 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:12.998208046 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:12.998277903 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:13.000587940 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:13.000813007 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:13.001895905 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:13.002010107 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:13.016232014 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.016547918 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.016575098 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.017674923 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.017771959 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.018073082 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.018167019 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.018271923 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.018280983 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.053482056 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:13.053512096 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:13.069447994 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.101481915 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:13.322247982 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.322545052 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.322575092 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.323719025 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.324239016 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.324343920 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.324363947 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.341684103 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:13.367338896 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.373473883 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.420514107 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:13.456841946 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.456896067 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.456924915 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.457011938 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.457024097 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.457046032 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.457067013 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.465432882 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.465490103 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.465615988 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.465640068 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.465928078 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.473598003 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.515494108 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.515518904 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.562474012 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.578015089 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.582079887 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.582320929 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.582341909 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.626507044 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.642477036 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:13.649013042 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.652951956 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.653026104 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.653045893 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.660949945 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.661010981 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.661036015 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.668963909 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.669075966 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.669086933 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.684854031 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.684920073 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.684935093 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.692941904 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.692974091 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.693006039 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.693013906 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.693064928 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.693075895 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.700979948 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.701095104 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.701102972 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.716830969 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.716888905 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.716902018 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.716916084 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.716964960 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.724630117 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.731889009 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.731961966 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.731980085 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.739372015 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.739808083 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.739826918 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.783476114 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.784518957 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.784610987 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.784658909 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.784892082 CET	49709	443	192.168.2.16	35.190.80.1
Dec 17, 2024 11:51:13.784914970 CET	443	49709	35.190.80.1	192.168.2.16
Dec 17, 2024 11:51:13.841244936 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.843544960 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.843790054 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.843815088 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.847601891 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.847718954 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.847735882 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.861044884 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.861061096 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.861154079 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.861177921 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.869829893 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.869894981 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.869909048 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.869997025 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.874129057 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.874219894 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.878216028 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.878228903 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.878360987 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.886737108 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.886755943 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.886830091 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.895374060 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.895386934 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.895488024 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.899550915 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.899631977 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.907902002 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.908047915 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.916419029 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.916508913 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.924813986 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.924894094 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.924921989 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.924943924 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.925010920 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.925010920 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.925129890 CET	49708	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.925147057 CET	443	49708	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.946722984 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.946777105 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:13.946916103 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.947180033 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:13.947201014 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:14.062268972 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.062331915 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:14.062460899 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.063167095 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.063184977 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:14.169406891 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.169449091 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:14.169858932 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.170139074 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:14.170161009 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:14.172667980 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:14.172710896 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:14.172981024 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:14.173154116 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:14.173162937 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:14.244472980 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:15.156337023 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.156771898 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.156794071 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.157830954 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.157892942 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158237934 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158291101 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158303022 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158310890 CET	443	49710	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.158389091 CET	49710	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158582926 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158620119 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.158685923 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158952951 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.158965111 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.272751093 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.273123980 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.273152113 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.288145065 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.288225889 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288605928 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288659096 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288659096 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288681984 CET	443	49711	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.288734913 CET	49711	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288937092 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.288975954 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.289062023 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.289336920 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.289349079 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.379708052 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.380017042 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.380034924 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.388314009 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.388391018 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.388745070 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.388765097 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.388844967 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.389004946 CET	443	49712	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.389064074 CET	49712	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.389307022 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.389316082 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.389358044 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.389467001 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.389590979 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.389619112 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.389775991 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:15.389796019 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:15.390780926 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.390928030 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.392085075 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.392211914 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.392364979 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.392371893 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.441519022 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.457520962 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:15.824472904 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824526072 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824554920 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824584961 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824615002 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824621916 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.824701071 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.824738979 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.824764967 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.824858904 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.832660913 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.832772970 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.832835913 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.841211081 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.841300011 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.841329098 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.886487961 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.886499882 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.934478045 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:15.944282055 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:15.998492002 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.016895056 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.020284891 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.020402908 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.020433903 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.028044939 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.028152943 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.028181076 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.035698891 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.035804033 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.035832882 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.051321983 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.051379919 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.051445961 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.051477909 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.051538944 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.059015989 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.066852093 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.066915989 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.066939116 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.066978931 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.067034006 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.074836969 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.082838058 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.082962990 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.083036900 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.089819908 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.089924097 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.089945078 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.142574072 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.142622948 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.191335917 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.211478949 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.213866949 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.213907957 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.213993073 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.213989019 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.214072943 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.214299917 CET	49713	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.214355946 CET	443	49713	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.373590946 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.373943090 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.373963118 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.375433922 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.375528097 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.375799894 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.375858068 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.375963926 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.375974894 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.376061916 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.376076937 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.428590059 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.448734999 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.448788881 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.448906898 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.449167967 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:16.449178934 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:16.501744032 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.502224922 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.502254009 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.503307104 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.503417015 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.504224062 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.504312038 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.507931948 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.551331997 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.554857016 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.554874897 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.600608110 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.601099968 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.601114988 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.601568937 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.602351904 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.602463961 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.602802038 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.602916956 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.603097916 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.603107929 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.649588108 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.820934057 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.820991039 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.821021080 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.821048021 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.821079016 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.821171999 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.821192980 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.821225882 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.821682930 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.829142094 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.837837934 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.837884903 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.837944984 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.837959051 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.838058949 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.846261024 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.846371889 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.846590042 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.846590042 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.850188971 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.850225925 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.850367069 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.850665092 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.850677013 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.950112104 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.950191021 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.950359106 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.951092958 CET	49715	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.951117039 CET	443	49715	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.953157902 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.953208923 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:16.953314066 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.953660011 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:16.953679085 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.016709089 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:17.016752005 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:17.016830921 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:17.017188072 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:17.017204046 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:17.041275978 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041323900 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041346073 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041383982 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041393042 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041424036 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041528940 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.041551113 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.041563988 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.049782991 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.049933910 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.049952984 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.057965994 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.058058977 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.058075905 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.107553959 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.107572079 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.155555010 CET	49714	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.155586958 CET	443	49714	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.155657053 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.232969046 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.237063885 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.237241983 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.237261057 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.243539095 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.243788004 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.243814945 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.251287937 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.251508951 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.251526117 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.267265081 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.267303944 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.267338037 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.267357111 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.267689943 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.275201082 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.284427881 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.284492970 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.284596920 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.284610987 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.284689903 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.291898012 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.300319910 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.300477982 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.300497055 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.307960033 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.308106899 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.308129072 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.363434076 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.363454103 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.410564899 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.425107956 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.427443027 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.427541018 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.427566051 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.432383060 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.432481050 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.432497978 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.438534975 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.438662052 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.438679934 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.443200111 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.443269968 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.443289995 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.451571941 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.451713085 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.451729059 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.451818943 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.460263968 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.460277081 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.460351944 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.464776993 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.464901924 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.473794937 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.473891020 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.478368998 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.478496075 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.487402916 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.487533092 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.496409893 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.496504068 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.505501032 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.505640030 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.510787964 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.510900974 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.521296024 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.521430016 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.617114067 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.617290020 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.623050928 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.623184919 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.626441002 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.626533031 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.626674891 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.626739979 CET	443	49716	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:17.626817942 CET	49716	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:17.659956932 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:17.660331011 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:17.660399914 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:17.661501884 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:17.661627054 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:17.661935091 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:17.662022114 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:17.662138939 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:17.662168026 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:17.713567019 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:17.871496916 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:18.061553001 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.061903000 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.061927080 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.062984943 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.063052893 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063486099 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063499928 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063555956 CET	443	49718	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.063565969 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063611031 CET	49718	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063922882 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.063977957 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.064104080 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.064285040 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.064297915 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.111166954 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111212015 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111241102 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111253023 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.111274958 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111306906 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111321926 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.111326933 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.111385107 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.119424105 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.127857924 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.127896070 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.127916098 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.127932072 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.127976894 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.136153936 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.167778015 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.168102980 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.168123960 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.169183016 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.169253111 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.169583082 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.169631958 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.169650078 CET	443	49719	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.169653893 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.169707060 CET	49719	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.170048952 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.170095921 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.170181990 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.170469046 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:18.170488119 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:18.186516047 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.226681948 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.227025986 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.227052927 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.228095055 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.228163958 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.228715897 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.228779078 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.228904009 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.228915930 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.230869055 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.234528065 CET	49678	443	192.168.2.16	20.189.173.10
Dec 17, 2024 11:51:18.282495975 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.282514095 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.303102970 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.306862116 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.306942940 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.307008982 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.314935923 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.315005064 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.315022945 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.322566032 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.322632074 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.322647095 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.330451965 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.330519915 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.330526114 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.346169949 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.346199989 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.346232891 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.346240997 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.346299887 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.353786945 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.361625910 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.361656904 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.361689091 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.361706018 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.361769915 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.369400024 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.377217054 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.377296925 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.377310991 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.385164022 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.385251999 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.385335922 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.396054029 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.396116018 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.396141052 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.423264027 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.423362017 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.423369884 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.423425913 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.423661947 CET	49717	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:18.423679113 CET	443	49717	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:18.672169924 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.672257900 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.672307968 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.672353029 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.672426939 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.672426939 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.672455072 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.680358887 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.681406021 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.681426048 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.688703060 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.688819885 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.688853979 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.694343090 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.694394112 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.694530964 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.694794893 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.694816113 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.728579998 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.728600979 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.776519060 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.792020082 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.839540958 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.839570045 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.867582083 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.867873907 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.867894888 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.877218962 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.877262115 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.877326965 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.877341032 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.877424955 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.885327101 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.893629074 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.893681049 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.893713951 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.893748999 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.893791914 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.893969059 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.893969059 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.894792080 CET	49720	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.894819975 CET	443	49720	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.897227049 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.897275925 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:18.897351027 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.897677898 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:18.897695065 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:19.275700092 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.276074886 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.276096106 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.276459932 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.276803970 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.276874065 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.277010918 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.319344997 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.386869907 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.387311935 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.387394905 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.388550997 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.388993979 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.389091969 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.389208078 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.435343027 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.666037083 CET	49673	443	192.168.2.16	204.79.197.203
Dec 17, 2024 11:51:19.716751099 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.716816902 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.716871023 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.717911959 CET	49722	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.717936039 CET	443	49722	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.826222897 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.826499939 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.826590061 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.826622009 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.826690912 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.826782942 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.826802015 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.828545094 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.828638077 CET	443	49723	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:19.828763008 CET	49723	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:19.905500889 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:19.906289101 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:19.906318903 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:19.906707048 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:19.908746958 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:19.908834934 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:19.908961058 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:19.955341101 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.112416983 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.113044977 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.113082886 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.114231110 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.114727020 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.114907980 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.114933014 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.159327030 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.160537004 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.349419117 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349478006 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349504948 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349539995 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349555016 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.349567890 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349627018 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.349633932 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.349679947 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.357587099 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.365591049 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.365626097 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.365657091 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.365683079 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.365730047 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.372997046 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.427514076 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.470278025 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.522770882 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.539984941 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.544549942 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.544675112 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.544689894 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.554076910 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.554135084 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.554143906 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.555665016 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.555738926 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.555814028 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.556653976 CET	49725	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.556677103 CET	443	49725	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.562124968 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.562161922 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:20.562257051 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.562349081 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.562592983 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.562596083 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.562604904 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:20.562613010 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.568303108 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.568376064 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.568382978 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.584157944 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.584224939 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.584332943 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.584352970 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.584652901 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.592202902 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.600378036 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.600430965 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.600447893 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.600465059 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.600523949 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.608254910 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.614897013 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.614970922 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.614981890 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.666522980 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.666539907 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.714561939 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.732004881 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.735336065 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.735411882 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.735423088 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.740291119 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.740331888 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.740365982 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.740374088 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.740413904 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.745507002 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.750189066 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.750267029 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.750274897 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.760209084 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.760216951 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.760329008 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.760337114 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.769151926 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.769212008 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.769217968 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.769258976 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.773489952 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.778122902 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.778188944 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.778207064 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.778302908 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.787465096 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.787472963 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.787534952 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.796690941 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.796699047 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.796757936 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.806013107 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.806082964 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.810719013 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.810805082 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.925913095 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.926018000 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.931349039 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.931421995 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.935086012 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.935144901 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.942445993 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.942508936 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.949534893 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.949609041 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.956684113 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.956754923 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.960454941 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.960529089 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.968580008 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.968652964 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.968664885 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.968698978 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.968763113 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.968928099 CET	49724	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:20.968944073 CET	443	49724	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:20.972289085 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.972343922 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:20.972539902 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.972801924 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:20.972820044 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:20.990540028 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:20.990596056 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:20.990659952 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:20.991014004 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:20.991036892 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:21.124960899 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:21.125003099 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:21.125149965 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:21.125463009 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:21.125478029 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:21.772810936 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:21.776757956 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:21.776772022 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:21.777215958 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:21.777779102 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:21.777865887 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:21.778048992 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:21.819339991 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:21.824531078 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.202296972 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.202711105 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.202728033 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.203068972 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.203933001 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.203933001 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.204008102 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.208786011 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.209105968 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.209127903 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.212107897 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.212306023 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.212758064 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.212827921 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.212899923 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.212912083 CET	443	49730	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.212971926 CET	49730	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.213417053 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.213483095 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.213706970 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.213949919 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:22.213964939 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:22.227456093 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.227534056 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.227613926 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.229038000 CET	49727	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.229055882 CET	443	49727	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.253560066 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.335330963 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.335743904 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.335776091 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.336129904 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.336553097 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.336620092 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.336899042 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.336940050 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.336977959 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.643225908 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643368959 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643454075 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.643471003 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643490076 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643609047 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.643619061 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643712997 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.643908024 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.643919945 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.651658058 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.651938915 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.651952028 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.668515921 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.668644905 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.668663979 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.681520939 CET	49680	80	192.168.2.16	192.229.211.108
Dec 17, 2024 11:51:22.692913055 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:22.693013906 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:22.693165064 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:22.713516951 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.763071060 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.782803059 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.782869101 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.782915115 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.782941103 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.782949924 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.782984018 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.783006907 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.790994883 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.791042089 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.791109085 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.791116953 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.791173935 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.799391985 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.807862997 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.808065891 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.808074951 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.809556961 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.809570074 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.838713884 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.840122938 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.840131998 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.848121881 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.848165989 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.848284006 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.848293066 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.848342896 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.856077909 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.857559919 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.863847017 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.863905907 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.863959074 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.863970041 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.864016056 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.872117043 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.879605055 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.880016088 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.880028963 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.887347937 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.887994051 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.888005018 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.895296097 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.895401001 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.895410061 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.902450085 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.902987003 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.903055906 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.903063059 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.919835091 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.919883013 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.919900894 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.919912100 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.919955015 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.927212954 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:22.953954935 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.968522072 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:22.974908113 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.978645086 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.978730917 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.978765011 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.986736059 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.986804008 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.986829042 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.994292974 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:22.994374990 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:22.994400978 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.002449989 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.004009962 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.004029989 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.017991066 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.018038034 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.018114090 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.018136024 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.018189907 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.025568962 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.027039051 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.029535055 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.031413078 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.031430960 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.033556938 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.033601999 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.033689976 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.033720970 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.033780098 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.036269903 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.036322117 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.036391020 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.036402941 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.036449909 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.041152954 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.041193008 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.048966885 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.050764084 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.050851107 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.050873041 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.050910950 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.050925016 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.050973892 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.055442095 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.055458069 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.055521011 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.057132006 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.059892893 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.059973001 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.059977055 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.059998989 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.064656973 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.068037033 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.068063021 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.068901062 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.068918943 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.068979979 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.073688984 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.073777914 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.082134962 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.082247019 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.091331005 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.091423035 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.099909067 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.100001097 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.104199886 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.104285955 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.111536980 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.111572981 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.112982988 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.113080025 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.118542910 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.118671894 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.147108078 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.147198915 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.159586906 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.167356968 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.171185017 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.171242952 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.171334982 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.171364069 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.171415091 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.179260969 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.195508003 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.195523977 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.195626974 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.195664883 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.205395937 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.205509901 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.205543041 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.205578089 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.205594063 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.214171886 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.214282036 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.214312077 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.214374065 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.219089985 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.219192028 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.221070051 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.221154928 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.222872972 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.222882032 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.222954035 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.228411913 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.228487015 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.228526115 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.228552103 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.228648901 CET	49729	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.228669882 CET	443	49729	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.230367899 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.230376959 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.230495930 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.233428001 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.233436108 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.233529091 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.233560085 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.233581066 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.233612061 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.233652115 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.233721972 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.233742952 CET	443	49731	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.233753920 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.236035109 CET	49731	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.244914055 CET	49707	443	192.168.2.16	142.250.181.132
Dec 17, 2024 11:51:23.244942904 CET	443	49707	142.250.181.132	192.168.2.16
Dec 17, 2024 11:51:23.249618053 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.249663115 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.249739885 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.250055075 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:23.250072002 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:23.383510113 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.383552074 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.383639097 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.383923054 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:23.383940935 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:23.426779985 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.427117109 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.427148104 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.428241014 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.428319931 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.428786039 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.428854942 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.429173946 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.429184914 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.476578951 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.867496967 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867624044 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867666960 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867707014 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867713928 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.867738962 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867749929 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.867754936 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.867789030 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.870680094 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.879086971 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.879201889 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:23.879215956 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.879257917 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.879381895 CET	49732	443	192.168.2.16	172.67.183.59
Dec 17, 2024 11:51:23.879412889 CET	443	49732	172.67.183.59	192.168.2.16
Dec 17, 2024 11:51:24.459095955 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.459489107 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:24.459511995 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.459862947 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.460191965 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:24.460263014 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.460335970 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:24.503341913 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.592866898 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:24.593240976 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:24.593257904 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:24.593611002 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:24.593981981 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:24.594039917 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:24.594063044 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:24.635353088 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:24.637572050 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:24.902322054 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.902407885 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:24.902484894 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:24.902937889 CET	49735	443	192.168.2.16	104.18.95.41
Dec 17, 2024 11:51:24.902959108 CET	443	49735	104.18.95.41	192.168.2.16
Dec 17, 2024 11:51:25.033205032 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:25.033294916 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:25.033344984 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:25.033376932 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:25.033392906 CET	443	49736	104.18.94.41	192.168.2.16
Dec 17, 2024 11:51:25.033453941 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:25.033914089 CET	49736	443	192.168.2.16	104.18.94.41
Dec 17, 2024 11:51:25.033935070 CET	443	49736	104.18.94.41	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 11:51:07.050870895 CET	192.168.2.16	1.1.1.1	0xfa1	Standard query (0)	alluc.co	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:07.051166058 CET	192.168.2.16	1.1.1.1	0xcc88	Standard query (0)	alluc.co	65	IN (0x0001)	false
Dec 17, 2024 11:51:10.202001095 CET	192.168.2.16	1.1.1.1	0x3a90	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:10.202135086 CET	192.168.2.16	1.1.1.1	0x9d8e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:11.125540972 CET	192.168.2.16	1.1.1.1	0x6608	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:11.125696898 CET	192.168.2.16	1.1.1.1	0xe17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:13.928262949 CET	192.168.2.16	1.1.1.1	0x4fd3	Standard query (0)	alluc.co	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:13.928402901 CET	192.168.2.16	1.1.1.1	0x8171	Standard query (0)	alluc.co	65	IN (0x0001)	false
Dec 17, 2024 11:51:13.937906027 CET	192.168.2.16	1.1.1.1	0x6003	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:13.938052893 CET	192.168.2.16	1.1.1.1	0xab0a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:16.217147112 CET	192.168.2.16	1.1.1.1	0xaa9a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:16.217320919 CET	192.168.2.16	1.1.1.1	0x617d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:16.878321886 CET	192.168.2.16	1.1.1.1	0xa637	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:16.878501892 CET	192.168.2.16	1.1.1.1	0xa723	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:55.446211100 CET	192.168.2.16	1.1.1.1	0xc9a3	Standard query (0)	123images.co	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.446335077 CET	192.168.2.16	1.1.1.1	0x13af	Standard query (0)	123images.co	65	IN (0x0001)	false
Dec 17, 2024 11:51:55.659528971 CET	192.168.2.16	1.1.1.1	0xddbd	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.659689903 CET	192.168.2.16	1.1.1.1	0x8135	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:55.831640959 CET	192.168.2.16	1.1.1.1	0x219c	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.983163118 CET	192.168.2.16	1.1.1.1	0x7fed	Standard query (0)	repetitiousfontmonopoly.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.983297110 CET	192.168.2.16	1.1.1.1	0xf3fb	Standard query (0)	repetitiousfontmonopoly.com	65	IN (0x0001)	false
Dec 17, 2024 11:51:57.431862116 CET	192.168.2.16	1.1.1.1	0xc580	Standard query (0)	123images.co	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:57.431973934 CET	192.168.2.16	1.1.1.1	0xc963	Standard query (0)	123images.co	65	IN (0x0001)	false
Dec 17, 2024 11:51:58.944674015 CET	192.168.2.16	1.1.1.1	0x65e1	Standard query (0)	gomo.to	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:58.944816113 CET	192.168.2.16	1.1.1.1	0xfe17	Standard query (0)	gomo.to	65	IN (0x0001)	false
Dec 17, 2024 11:52:00.890023947 CET	192.168.2.16	1.1.1.1	0x60c9	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:00.890217066 CET	192.168.2.16	1.1.1.1	0xf53e	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:01.989516973 CET	192.168.2.16	1.1.1.1	0xed12	Standard query (0)	repetitiousfontmonopoly.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:01.989787102 CET	192.168.2.16	1.1.1.1	0xbb4	Standard query (0)	repetitiousfontmonopoly.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:02.711182117 CET	192.168.2.16	1.1.1.1	0x194c	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.711319923 CET	192.168.2.16	1.1.1.1	0x99b0	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:02.716015100 CET	192.168.2.16	1.1.1.1	0x1d8	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.716851950 CET	192.168.2.16	1.1.1.1	0x3c64	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:04.737087011 CET	192.168.2.16	1.1.1.1	0x9fde	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.737227917 CET	192.168.2.16	1.1.1.1	0x3825	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:04.737503052 CET	192.168.2.16	1.1.1.1	0x5df8	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.737637043 CET	192.168.2.16	1.1.1.1	0x1469	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.520672083 CET	192.168.2.16	1.1.1.1	0x454	Standard query (0)	gomo.to	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.520853996 CET	192.168.2.16	1.1.1.1	0xfdd9	Standard query (0)	gomo.to	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.739007950 CET	192.168.2.16	1.1.1.1	0x92eb	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.739299059 CET	192.168.2.16	1.1.1.1	0xb98e	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.744658947 CET	192.168.2.16	1.1.1.1	0xb2ff	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.744986057 CET	192.168.2.16	1.1.1.1	0x7d5	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.745408058 CET	192.168.2.16	1.1.1.1	0x46af	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.745609045 CET	192.168.2.16	1.1.1.1	0xbd10	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.745893002 CET	192.168.2.16	1.1.1.1	0xc979	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.746027946 CET	192.168.2.16	1.1.1.1	0xaec2	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:06.876777887 CET	192.168.2.16	1.1.1.1	0xfc98	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.876929045 CET	192.168.2.16	1.1.1.1	0xe7f1	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:07.108472109 CET	192.168.2.16	1.1.1.1	0x51d5	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.108614922 CET	192.168.2.16	1.1.1.1	0xd161	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:07.108875036 CET	192.168.2.16	1.1.1.1	0x1def	Standard query (0)	p.dtsan.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.109002113 CET	192.168.2.16	1.1.1.1	0x3d4b	Standard query (0)	p.dtsan.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:07.109280109 CET	192.168.2.16	1.1.1.1	0xcddc	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.109397888 CET	192.168.2.16	1.1.1.1	0xce19	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:08.805399895 CET	192.168.2.16	1.1.1.1	0x397a	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.805560112 CET	192.168.2.16	1.1.1.1	0xf9d4	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:08.987886906 CET	192.168.2.16	1.1.1.1	0x91b2	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.988240004 CET	192.168.2.16	1.1.1.1	0x71f6	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:08.989145041 CET	192.168.2.16	1.1.1.1	0xbe1c	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.989283085 CET	192.168.2.16	1.1.1.1	0x9368	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:08.990005970 CET	192.168.2.16	1.1.1.1	0xc8b9	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.990097046 CET	192.168.2.16	1.1.1.1	0x9b6b	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.023749113 CET	192.168.2.16	1.1.1.1	0x2b65	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.024688959 CET	192.168.2.16	1.1.1.1	0x7447	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.028287888 CET	192.168.2.16	1.1.1.1	0x3c1b	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.028434992 CET	192.168.2.16	1.1.1.1	0x134d	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.172278881 CET	192.168.2.16	1.1.1.1	0xf73a	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.172440052 CET	192.168.2.16	1.1.1.1	0x9d95	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.172770977 CET	192.168.2.16	1.1.1.1	0xed1d	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.173563957 CET	192.168.2.16	1.1.1.1	0x44a9	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.222909927 CET	192.168.2.16	1.1.1.1	0x62b0	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.223304987 CET	192.168.2.16	1.1.1.1	0xd614	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.472280979 CET	192.168.2.16	1.1.1.1	0xcccd	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.472423077 CET	192.168.2.16	1.1.1.1	0xf1c6	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.487739086 CET	192.168.2.16	1.1.1.1	0x4b6f	Standard query (0)	hqq.to	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.488156080 CET	192.168.2.16	1.1.1.1	0x4598	Standard query (0)	hqq.to	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.501837015 CET	192.168.2.16	1.1.1.1	0xca6b	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.501993895 CET	192.168.2.16	1.1.1.1	0xf307	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:09.504648924 CET	192.168.2.16	1.1.1.1	0x1ee5	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.505042076 CET	192.168.2.16	1.1.1.1	0x8921	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:10.197308064 CET	192.168.2.16	1.1.1.1	0x12a8	Standard query (0)	p.dtsan.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.197499990 CET	192.168.2.16	1.1.1.1	0x28bb	Standard query (0)	p.dtsan.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:10.210264921 CET	192.168.2.16	1.1.1.1	0x47a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.210433006 CET	192.168.2.16	1.1.1.1	0x10ae	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:10.829621077 CET	192.168.2.16	1.1.1.1	0x808	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.829940081 CET	192.168.2.16	1.1.1.1	0xa8b	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:10.831625938 CET	192.168.2.16	1.1.1.1	0xdd58	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.831861019 CET	192.168.2.16	1.1.1.1	0xbc4c	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.125803947 CET	192.168.2.16	1.1.1.1	0x157f	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.125890017 CET	192.168.2.16	1.1.1.1	0xaee7	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.171874046 CET	192.168.2.16	1.1.1.1	0x4f10	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.172030926 CET	192.168.2.16	1.1.1.1	0x3ab8	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.348306894 CET	192.168.2.16	1.1.1.1	0x6ba4	Standard query (0)	e.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.348704100 CET	192.168.2.16	1.1.1.1	0x377a	Standard query (0)	e.dlx.addthis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.349060059 CET	192.168.2.16	1.1.1.1	0xc3ec	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.349200964 CET	192.168.2.16	1.1.1.1	0xbfd1	Standard query (0)	i.simpli.fi	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.350600004 CET	192.168.2.16	1.1.1.1	0x7e99	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.350749016 CET	192.168.2.16	1.1.1.1	0xdbaa	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.487978935 CET	192.168.2.16	1.1.1.1	0x4307	Standard query (0)	e.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.629110098 CET	192.168.2.16	1.1.1.1	0xe352	Standard query (0)	e.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.629240036 CET	192.168.2.16	1.1.1.1	0x9092	Standard query (0)	e.dlx.addthis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.936912060 CET	192.168.2.16	1.1.1.1	0xbf2c	Standard query (0)	global.stun.twilio.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.937346935 CET	192.168.2.16	1.1.1.1	0x9106	Standard query (0)	global.stun.twilio.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.937616110 CET	192.168.2.16	1.1.1.1	0x178e	Standard query (0)	counter.yadro.ru	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.937760115 CET	192.168.2.16	1.1.1.1	0x9599	Standard query (0)	counter.yadro.ru	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.940421104 CET	192.168.2.16	1.1.1.1	0x6239	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.940565109 CET	192.168.2.16	1.1.1.1	0xedb7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.055938005 CET	192.168.2.16	1.1.1.1	0xbb0b	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.056086063 CET	192.168.2.16	1.1.1.1	0x5f52	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.075026989 CET	192.168.2.16	1.1.1.1	0xf4d5	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.075197935 CET	192.168.2.16	1.1.1.1	0xc935	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.078921080 CET	192.168.2.16	1.1.1.1	0xaa65	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.079078913 CET	192.168.2.16	1.1.1.1	0x38d4	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.106559038 CET	192.168.2.16	1.1.1.1	0x7711	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.106767893 CET	192.168.2.16	1.1.1.1	0x739b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.226078033 CET	192.168.2.16	1.1.1.1	0x3108	Standard query (0)	deliver.vkcdnservice.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.226208925 CET	192.168.2.16	1.1.1.1	0x3c27	Standard query (0)	deliver.vkcdnservice.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.283112049 CET	192.168.2.16	1.1.1.1	0x44a7	Standard query (0)	a.labadena.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.283220053 CET	192.168.2.16	1.1.1.1	0x8f8e	Standard query (0)	a.labadena.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.495776892 CET	192.168.2.16	1.1.1.1	0xa828	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.495898962 CET	192.168.2.16	1.1.1.1	0x3d41	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.499907017 CET	192.168.2.16	1.1.1.1	0x1369	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.500053883 CET	192.168.2.16	1.1.1.1	0x58cd	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.672136068 CET	192.168.2.16	1.1.1.1	0x2c05	Standard query (0)	wss.commentsmodule.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.672260046 CET	192.168.2.16	1.1.1.1	0x34de	Standard query (0)	wss.commentsmodule.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.740484953 CET	192.168.2.16	1.1.1.1	0x67eb	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.740607023 CET	192.168.2.16	1.1.1.1	0x9320	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.786329031 CET	192.168.2.16	1.1.1.1	0x60db	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.786478043 CET	192.168.2.16	1.1.1.1	0x7126	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.815201044 CET	192.168.2.16	1.1.1.1	0x72e6	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.815443039 CET	192.168.2.16	1.1.1.1	0xffed	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.816772938 CET	192.168.2.16	1.1.1.1	0x2d60	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.816968918 CET	192.168.2.16	1.1.1.1	0x37d	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.817908049 CET	192.168.2.16	1.1.1.1	0x606e	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.818063974 CET	192.168.2.16	1.1.1.1	0x368	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.818994999 CET	192.168.2.16	1.1.1.1	0xcc82	Standard query (0)	p.dtsan.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.819125891 CET	192.168.2.16	1.1.1.1	0x40ab	Standard query (0)	p.dtsan.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.819797039 CET	192.168.2.16	1.1.1.1	0xfaae	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.819911003 CET	192.168.2.16	1.1.1.1	0x26a8	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.866276979 CET	192.168.2.16	1.1.1.1	0xf447	Standard query (0)	stun2.l.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.866414070 CET	192.168.2.16	1.1.1.1	0x7529	Standard query (0)	stun2.l.google.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:12.999361992 CET	192.168.2.16	1.1.1.1	0xb53d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.999500990 CET	192.168.2.16	1.1.1.1	0xba83	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:13.814929008 CET	192.168.2.16	1.1.1.1	0x3c3	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.815064907 CET	192.168.2.16	1.1.1.1	0x66ac	Standard query (0)	i.simpli.fi	65	IN (0x0001)	false
Dec 17, 2024 11:52:13.872329950 CET	192.168.2.16	1.1.1.1	0xfe48	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.872463942 CET	192.168.2.16	1.1.1.1	0x55c1	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:14.266827106 CET	192.168.2.16	1.1.1.1	0xf973	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.267059088 CET	192.168.2.16	1.1.1.1	0x764b	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Dec 17, 2024 11:52:14.275573969 CET	192.168.2.16	1.1.1.1	0x9251	Standard query (0)	hqq.to	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.275895119 CET	192.168.2.16	1.1.1.1	0xf31e	Standard query (0)	hqq.to	65	IN (0x0001)	false
Dec 17, 2024 11:52:14.443114042 CET	192.168.2.16	1.1.1.1	0x4d8d	Standard query (0)	commentsmodule.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.443299055 CET	192.168.2.16	1.1.1.1	0xedf4	Standard query (0)	commentsmodule.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:14.499320984 CET	192.168.2.16	1.1.1.1	0xe69e	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Dec 17, 2024 11:52:14.766619921 CET	192.168.2.16	1.1.1.1	0xccb3	Standard query (0)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.767349005 CET	192.168.2.16	1.1.1.1	0x2ece	Standard query (0)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	65	IN (0x0001)	false
Dec 17, 2024 11:52:14.791877985 CET	192.168.2.16	1.1.1.1	0x1bcb	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.792026997 CET	192.168.2.16	1.1.1.1	0x211a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:14.853669882 CET	192.168.2.16	1.1.1.1	0xa8de	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.853843927 CET	192.168.2.16	1.1.1.1	0x42af	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 17, 2024 11:52:15.001791000 CET	192.168.2.16	1.1.1.1	0xcaf7	Standard query (0)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.760379076 CET	192.168.2.16	1.1.1.1	0x3b60	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.760659933 CET	192.168.2.16	1.1.1.1	0x5f8f	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:16.762506008 CET	192.168.2.16	1.1.1.1	0x3682	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.762830973 CET	192.168.2.16	1.1.1.1	0x3eab	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:16.763180971 CET	192.168.2.16	1.1.1.1	0xc6ab	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.763309002 CET	192.168.2.16	1.1.1.1	0xefd8	Standard query (0)	ml314.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:17.460582972 CET	192.168.2.16	1.1.1.1	0xebd0	Standard query (0)	commentsmodule.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:17.460727930 CET	192.168.2.16	1.1.1.1	0xa9cb	Standard query (0)	commentsmodule.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:18.174356937 CET	192.168.2.16	1.1.1.1	0xdaa3	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:18.176872969 CET	192.168.2.16	1.1.1.1	0x2d5	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:20.066365004 CET	192.168.2.16	1.1.1.1	0xd2c	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.066602945 CET	192.168.2.16	1.1.1.1	0x59d4	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:20.319293022 CET	192.168.2.16	1.1.1.1	0x3ff9	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.319524050 CET	192.168.2.16	1.1.1.1	0x37e7	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:20.378628016 CET	192.168.2.16	1.1.1.1	0xecc2	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.378628969 CET	192.168.2.16	1.1.1.1	0x72d4	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:20.750690937 CET	192.168.2.16	1.1.1.1	0x72e1	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.750876904 CET	192.168.2.16	1.1.1.1	0x3392	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:22.198553085 CET	192.168.2.16	1.1.1.1	0xaae	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.198707104 CET	192.168.2.16	1.1.1.1	0xcf79	Standard query (0)	ml314.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:22.200141907 CET	192.168.2.16	1.1.1.1	0xfd65	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:22.200141907 CET	192.168.2.16	1.1.1.1	0xce9b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.308582067 CET	192.168.2.16	1.1.1.1	0x5022	Standard query (0)	profitableexactly.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.308851957 CET	192.168.2.16	1.1.1.1	0x2312	Standard query (0)	profitableexactly.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:22.849652052 CET	192.168.2.16	1.1.1.1	0x9677	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.849915028 CET	192.168.2.16	1.1.1.1	0xf3a3	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.125235081 CET	192.168.2.16	1.1.1.1	0xff63	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.127494097 CET	192.168.2.16	1.1.1.1	0x368f	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.178989887 CET	192.168.2.16	1.1.1.1	0xb6c6	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.179433107 CET	192.168.2.16	1.1.1.1	0xb88	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.191668987 CET	192.168.2.16	1.1.1.1	0xdfb2	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.191993952 CET	192.168.2.16	1.1.1.1	0xa19e	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.192442894 CET	192.168.2.16	1.1.1.1	0xb8e9	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.192609072 CET	192.168.2.16	1.1.1.1	0x77b0	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.193298101 CET	192.168.2.16	1.1.1.1	0x6ff	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.193455935 CET	192.168.2.16	1.1.1.1	0x50e1	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.194143057 CET	192.168.2.16	1.1.1.1	0x6daa	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.194287062 CET	192.168.2.16	1.1.1.1	0x314f	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.194880962 CET	192.168.2.16	1.1.1.1	0x1651	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.195029020 CET	192.168.2.16	1.1.1.1	0x45b0	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.199337959 CET	192.168.2.16	1.1.1.1	0xfe2f	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.199542999 CET	192.168.2.16	1.1.1.1	0x56bc	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:23.631091118 CET	192.168.2.16	1.1.1.1	0xb1ca	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:24.813709974 CET	192.168.2.16	1.1.1.1	0x625	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:24.813868999 CET	192.168.2.16	1.1.1.1	0x4ab3	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:24.814349890 CET	192.168.2.16	1.1.1.1	0xf08f	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:24.814527988 CET	192.168.2.16	1.1.1.1	0xc3ce	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:25.358436108 CET	192.168.2.16	1.1.1.1	0x296f	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.358788013 CET	192.168.2.16	1.1.1.1	0x6734	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:25.643953085 CET	192.168.2.16	1.1.1.1	0x7759	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.644258022 CET	192.168.2.16	1.1.1.1	0xcfc5	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:25.749399900 CET	192.168.2.16	1.1.1.1	0x9324	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.749640942 CET	192.168.2.16	1.1.1.1	0x5879	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:26.045727015 CET	192.168.2.16	1.1.1.1	0xdfad	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.045870066 CET	192.168.2.16	1.1.1.1	0xe2f3	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:26.455076933 CET	192.168.2.16	1.1.1.1	0xfcb4	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.455216885 CET	192.168.2.16	1.1.1.1	0x2ba6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:26.719758034 CET	192.168.2.16	1.1.1.1	0x82fa	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.719893932 CET	192.168.2.16	1.1.1.1	0x88f6	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:27.280224085 CET	192.168.2.16	1.1.1.1	0x9d6f	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:27.280363083 CET	192.168.2.16	1.1.1.1	0xe4a6	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:28.202493906 CET	192.168.2.16	1.1.1.1	0x9ed7	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.202676058 CET	192.168.2.16	1.1.1.1	0x4d4e	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:28.233155012 CET	192.168.2.16	1.1.1.1	0x6beb	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.233441114 CET	192.168.2.16	1.1.1.1	0xb7fa	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:30.201571941 CET	192.168.2.16	1.1.1.1	0xdd92	Standard query (0)	a.dtsan.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.201726913 CET	192.168.2.16	1.1.1.1	0x627	Standard query (0)	a.dtsan.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:30.304042101 CET	192.168.2.16	1.1.1.1	0xe13c	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.304181099 CET	192.168.2.16	1.1.1.1	0xd6c4	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:32.001816988 CET	192.168.2.16	1.1.1.1	0x7560	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:32.001992941 CET	192.168.2.16	1.1.1.1	0x8f1b	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:32.914381027 CET	192.168.2.16	1.1.1.1	0x7c1d	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:32.914592981 CET	192.168.2.16	1.1.1.1	0xfea6	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:33.201709032 CET	192.168.2.16	1.1.1.1	0x5d6b	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.201903105 CET	192.168.2.16	1.1.1.1	0xc36e	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:33.345544100 CET	192.168.2.16	1.1.1.1	0xddb3	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.347398043 CET	192.168.2.16	1.1.1.1	0x6089	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:34.680279016 CET	192.168.2.16	1.1.1.1	0xa5de	Standard query (0)	a.dtsan.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:34.680447102 CET	192.168.2.16	1.1.1.1	0xa49a	Standard query (0)	a.dtsan.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:34.879784107 CET	192.168.2.16	1.1.1.1	0x765f	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:34.880029917 CET	192.168.2.16	1.1.1.1	0x306b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:35.196177006 CET	192.168.2.16	1.1.1.1	0x4911	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.196346045 CET	192.168.2.16	1.1.1.1	0x6dd2	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:35.447069883 CET	192.168.2.16	1.1.1.1	0x787f	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.447289944 CET	192.168.2.16	1.1.1.1	0x8b74	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:39.551426888 CET	192.168.2.16	1.1.1.1	0x5fcd	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.551750898 CET	192.168.2.16	1.1.1.1	0xca69	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:40.147201061 CET	192.168.2.16	1.1.1.1	0xb19b	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.147360086 CET	192.168.2.16	1.1.1.1	0x74e5	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:42.423571110 CET	192.168.2.16	1.1.1.1	0xd147	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.423708916 CET	192.168.2.16	1.1.1.1	0x6284	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:46.410085917 CET	192.168.2.16	1.1.1.1	0x1028	Standard query (0)	thrtl.redinuid.imrworldwide.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:46.410187006 CET	192.168.2.16	1.1.1.1	0x2fbb	Standard query (0)	thrtl.redinuid.imrworldwide.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:46.909368038 CET	192.168.2.16	1.1.1.1	0xb145	Standard query (0)	thrtl.redinuid.imrworldwide.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.027935028 CET	192.168.2.16	1.1.1.1	0xbd40	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.028136015 CET	192.168.2.16	1.1.1.1	0x6c85	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:49.682513952 CET	192.168.2.16	1.1.1.1	0x1125	Standard query (0)	nlsn.thrtle.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.682707071 CET	192.168.2.16	1.1.1.1	0x8401	Standard query (0)	nlsn.thrtle.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:50.929949045 CET	192.168.2.16	1.1.1.1	0x687f	Standard query (0)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.114679098 CET	192.168.2.16	1.1.1.1	0x7e59	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.114800930 CET	192.168.2.16	1.1.1.1	0x4467	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.184796095 CET	192.168.2.16	1.1.1.1	0xd628	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.184926987 CET	192.168.2.16	1.1.1.1	0xf9e4	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.185210943 CET	192.168.2.16	1.1.1.1	0x93f7	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.185326099 CET	192.168.2.16	1.1.1.1	0xcda6	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.186172009 CET	192.168.2.16	1.1.1.1	0x38ed	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.186305046 CET	192.168.2.16	1.1.1.1	0x1e2c	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.186865091 CET	192.168.2.16	1.1.1.1	0x7ef	Standard query (0)	e.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.187006950 CET	192.168.2.16	1.1.1.1	0x82ed	Standard query (0)	e.dlx.addthis.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.187280893 CET	192.168.2.16	1.1.1.1	0xe335	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.187410116 CET	192.168.2.16	1.1.1.1	0x9362	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.392401934 CET	192.168.2.16	1.1.1.1	0x26a6	Standard query (0)	e.dlx.addthis.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.037627935 CET	192.168.2.16	1.1.1.1	0xc52e	Standard query (0)	partner.mediawallahscript.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.037764072 CET	192.168.2.16	1.1.1.1	0x33fd	Standard query (0)	partner.mediawallahscript.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:55.244187117 CET	192.168.2.16	1.1.1.1	0x75c0	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.244409084 CET	192.168.2.16	1.1.1.1	0xd670	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:55.421631098 CET	192.168.2.16	1.1.1.1	0x8e9	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.570518970 CET	192.168.2.16	1.1.1.1	0xb700	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.570763111 CET	192.168.2.16	1.1.1.1	0x39ca	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:55.574991941 CET	192.168.2.16	1.1.1.1	0x6df9	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.575124979 CET	192.168.2.16	1.1.1.1	0xa62b	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:56.110970974 CET	192.168.2.16	1.1.1.1	0xd4a3	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:56.111115932 CET	192.168.2.16	1.1.1.1	0xc6f9	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 17, 2024 11:52:59.842834949 CET	192.168.2.16	1.1.1.1	0xeef	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:59.842978954 CET	192.168.2.16	1.1.1.1	0x9772	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:01.538465977 CET	192.168.2.16	1.1.1.1	0xff2f	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:01.538714886 CET	192.168.2.16	1.1.1.1	0x33e5	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 17, 2024 11:53:02.274024010 CET	192.168.2.16	1.1.1.1	0x874	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:02.274167061 CET	192.168.2.16	1.1.1.1	0x6dee	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:03.208796024 CET	192.168.2.16	1.1.1.1	0x5190	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:03.208942890 CET	192.168.2.16	1.1.1.1	0x6872	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 17, 2024 11:53:03.256402016 CET	192.168.2.16	1.1.1.1	0xb350	Standard query (0)	idsync.reson8.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:03.256546974 CET	192.168.2.16	1.1.1.1	0xe03a	Standard query (0)	idsync.reson8.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:04.102931976 CET	192.168.2.16	1.1.1.1	0x1aa4	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:04.103071928 CET	192.168.2.16	1.1.1.1	0x793b	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:06.822170973 CET	192.168.2.16	1.1.1.1	0x49ba	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:06.822307110 CET	192.168.2.16	1.1.1.1	0x22f7	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:07.119113922 CET	192.168.2.16	1.1.1.1	0x19c9	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:07.119273901 CET	192.168.2.16	1.1.1.1	0x7c32	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 17, 2024 11:53:08.054802895 CET	192.168.2.16	1.1.1.1	0x722b	Standard query (0)	wss.commentsmodule.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.054923058 CET	192.168.2.16	1.1.1.1	0x8991	Standard query (0)	_8443._https.wss.commentsmodule.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:08.057687044 CET	192.168.2.16	1.1.1.1	0x9410	Standard query (0)	videocdnmetrika.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.057872057 CET	192.168.2.16	1.1.1.1	0xf3e6	Standard query (0)	videocdnmetrika.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:08.122315884 CET	192.168.2.16	1.1.1.1	0x9dea	Standard query (0)	cdn-s8.cfglobalcdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.122472048 CET	192.168.2.16	1.1.1.1	0x9d1a	Standard query (0)	cdn-s8.cfglobalcdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:10.317677021 CET	192.168.2.16	1.1.1.1	0x48e9	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:10.317837954 CET	192.168.2.16	1.1.1.1	0x30c	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:11.356426954 CET	192.168.2.16	1.1.1.1	0x19b7	Standard query (0)	cdn-s8.cfglobalcdn.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.356560946 CET	192.168.2.16	1.1.1.1	0x32fb	Standard query (0)	cdn-s8.cfglobalcdn.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:11.397216082 CET	192.168.2.16	1.1.1.1	0x4eb8	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.397360086 CET	192.168.2.16	1.1.1.1	0x5eb9	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 17, 2024 11:53:11.414185047 CET	192.168.2.16	1.1.1.1	0x3e6e	Standard query (0)	videocdnmetrika.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.414324999 CET	192.168.2.16	1.1.1.1	0x390c	Standard query (0)	videocdnmetrika.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:11.421824932 CET	192.168.2.16	1.1.1.1	0x76ae	Standard query (0)	videocdnshop.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.422035933 CET	192.168.2.16	1.1.1.1	0x251c	Standard query (0)	videocdnshop.com	65	IN (0x0001)	false
Dec 17, 2024 11:53:12.969568968 CET	192.168.2.16	1.1.1.1	0xd098	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:12.969697952 CET	192.168.2.16	1.1.1.1	0x764a	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Dec 17, 2024 11:53:12.994298935 CET	192.168.2.16	1.1.1.1	0x68ac	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:12.994539022 CET	192.168.2.16	1.1.1.1	0x6c37	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 11:51:07.194072008 CET	1.1.1.1	192.168.2.16	0xcc88	No error (0)	alluc.co			65	IN (0x0001)	false
Dec 17, 2024 11:51:07.194276094 CET	1.1.1.1	192.168.2.16	0xfa1	No error (0)	alluc.co		172.67.183.59	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:07.194276094 CET	1.1.1.1	192.168.2.16	0xfa1	No error (0)	alluc.co		104.21.43.183	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:10.433482885 CET	1.1.1.1	192.168.2.16	0x3a90	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:11.263956070 CET	1.1.1.1	192.168.2.16	0x6608	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:11.354891062 CET	1.1.1.1	192.168.2.16	0xe17	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 17, 2024 11:51:14.066524982 CET	1.1.1.1	192.168.2.16	0x8171	No error (0)	alluc.co			65	IN (0x0001)	false
Dec 17, 2024 11:51:14.077733040 CET	1.1.1.1	192.168.2.16	0xab0a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 17, 2024 11:51:14.168822050 CET	1.1.1.1	192.168.2.16	0x4fd3	No error (0)	alluc.co		172.67.183.59	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:14.168822050 CET	1.1.1.1	192.168.2.16	0x4fd3	No error (0)	alluc.co		104.21.43.183	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:14.172190905 CET	1.1.1.1	192.168.2.16	0x6003	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:14.172190905 CET	1.1.1.1	192.168.2.16	0x6003	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:16.355192900 CET	1.1.1.1	192.168.2.16	0x617d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 17, 2024 11:51:16.447750092 CET	1.1.1.1	192.168.2.16	0xaa9a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:16.447750092 CET	1.1.1.1	192.168.2.16	0xaa9a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:17.015671015 CET	1.1.1.1	192.168.2.16	0xa637	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:17.015671015 CET	1.1.1.1	192.168.2.16	0xa637	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:17.015712976 CET	1.1.1.1	192.168.2.16	0xa723	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 17, 2024 11:51:55.707911015 CET	1.1.1.1	192.168.2.16	0xc9a3	No error (0)	123images.co		172.67.198.22	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.707911015 CET	1.1.1.1	192.168.2.16	0xc9a3	No error (0)	123images.co		104.21.49.253	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.797432899 CET	1.1.1.1	192.168.2.16	0xddbd	Name error (3)	s7.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:55.842869043 CET	1.1.1.1	192.168.2.16	0x13af	No error (0)	123images.co			65	IN (0x0001)	false
Dec 17, 2024 11:51:55.885112047 CET	1.1.1.1	192.168.2.16	0x8135	Name error (3)	s7.addthis.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:51:55.969501019 CET	1.1.1.1	192.168.2.16	0x219c	Name error (3)	s7.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:56.354862928 CET	1.1.1.1	192.168.2.16	0x7fed	No error (0)	repetitiousfontmonopoly.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:57.569725990 CET	1.1.1.1	192.168.2.16	0xc963	No error (0)	123images.co			65	IN (0x0001)	false
Dec 17, 2024 11:51:57.572736979 CET	1.1.1.1	192.168.2.16	0xc580	No error (0)	123images.co		172.67.198.22	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:57.572736979 CET	1.1.1.1	192.168.2.16	0xc580	No error (0)	123images.co		104.21.49.253	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:51:59.424021006 CET	1.1.1.1	192.168.2.16	0x65e1	No error (0)	gomo.to		31.42.184.242	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:01.028259039 CET	1.1.1.1	192.168.2.16	0x60c9	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:01.029078007 CET	1.1.1.1	192.168.2.16	0xf53e	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.127595901 CET	1.1.1.1	192.168.2.16	0xed12	No error (0)	repetitiousfontmonopoly.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.848691940 CET	1.1.1.1	192.168.2.16	0x194c	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:02.850297928 CET	1.1.1.1	192.168.2.16	0x99b0	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:02.855295897 CET	1.1.1.1	192.168.2.16	0x1d8	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.883840084 CET	1.1.1.1	192.168.2.16	0x5df8	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.883840084 CET	1.1.1.1	192.168.2.16	0x5df8	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.896697998 CET	1.1.1.1	192.168.2.16	0x1469	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:04.977878094 CET	1.1.1.1	192.168.2.16	0x9fde	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.661360979 CET	1.1.1.1	192.168.2.16	0x454	No error (0)	gomo.to		31.42.184.242	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.988466024 CET	1.1.1.1	192.168.2.16	0x92eb	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:06.988466024 CET	1.1.1.1	192.168.2.16	0x92eb	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103501081 CET	1.1.1.1	192.168.2.16	0xb98e	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:07.103526115 CET	1.1.1.1	192.168.2.16	0x7d5	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103538990 CET	1.1.1.1	192.168.2.16	0xbd10	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:07.103602886 CET	1.1.1.1	192.168.2.16	0xc979	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103602886 CET	1.1.1.1	192.168.2.16	0xc979	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		18.196.145.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103602886 CET	1.1.1.1	192.168.2.16	0xc979	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.123.64.158	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103602886 CET	1.1.1.1	192.168.2.16	0xc979	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		52.29.88.124	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103615999 CET	1.1.1.1	192.168.2.16	0xaec2	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103621006 CET	1.1.1.1	192.168.2.16	0x46af	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103621006 CET	1.1.1.1	192.168.2.16	0x46af	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103631020 CET	1.1.1.1	192.168.2.16	0xb2ff	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103734970 CET	1.1.1.1	192.168.2.16	0xfc98	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.103745937 CET	1.1.1.1	192.168.2.16	0xe7f1	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.246284008 CET	1.1.1.1	192.168.2.16	0x1def	No error (0)	p.dtsan.net		104.21.91.54	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.246284008 CET	1.1.1.1	192.168.2.16	0x1def	No error (0)	p.dtsan.net		172.67.167.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.247103930 CET	1.1.1.1	192.168.2.16	0xd161	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.247148991 CET	1.1.1.1	192.168.2.16	0x51d5	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:07.247179985 CET	1.1.1.1	192.168.2.16	0x3d4b	No error (0)	p.dtsan.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:07.247627020 CET	1.1.1.1	192.168.2.16	0xcddc	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.247627020 CET	1.1.1.1	192.168.2.16	0xcddc	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:07.335176945 CET	1.1.1.1	192.168.2.16	0xce19	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:08.942512035 CET	1.1.1.1	192.168.2.16	0x397a	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.128349066 CET	1.1.1.1	192.168.2.16	0xbe1c	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.128349066 CET	1.1.1.1	192.168.2.16	0xbe1c	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.128349066 CET	1.1.1.1	192.168.2.16	0xbe1c	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.132389069 CET	1.1.1.1	192.168.2.16	0x9368	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:09.135370970 CET	1.1.1.1	192.168.2.16	0x91b2	No error (0)	tags.crwdcntrl.net		108.139.60.56	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.135370970 CET	1.1.1.1	192.168.2.16	0x91b2	No error (0)	tags.crwdcntrl.net		108.139.60.123	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.135370970 CET	1.1.1.1	192.168.2.16	0x91b2	No error (0)	tags.crwdcntrl.net		108.139.60.106	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.135370970 CET	1.1.1.1	192.168.2.16	0x91b2	No error (0)	tags.crwdcntrl.net		108.139.60.59	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.163523912 CET	1.1.1.1	192.168.2.16	0x7447	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.166527033 CET	1.1.1.1	192.168.2.16	0x3c1b	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.231472015 CET	1.1.1.1	192.168.2.16	0xc8b9	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.258486986 CET	1.1.1.1	192.168.2.16	0x2b65	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.260647058 CET	1.1.1.1	192.168.2.16	0x134d	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.312511921 CET	1.1.1.1	192.168.2.16	0xf73a	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.312511921 CET	1.1.1.1	192.168.2.16	0xf73a	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.313242912 CET	1.1.1.1	192.168.2.16	0xed1d	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.314162016 CET	1.1.1.1	192.168.2.16	0x9d95	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:09.315424919 CET	1.1.1.1	192.168.2.16	0x44a9	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.444201946 CET	1.1.1.1	192.168.2.16	0x62b0	No error (0)	ic.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.444201946 CET	1.1.1.1	192.168.2.16	0x62b0	No error (0)	ic.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.609822035 CET	1.1.1.1	192.168.2.16	0xcccd	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.609822035 CET	1.1.1.1	192.168.2.16	0xcccd	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.629002094 CET	1.1.1.1	192.168.2.16	0x4b6f	No error (0)	hqq.to		190.115.19.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.642792940 CET	1.1.1.1	192.168.2.16	0x1ee5	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.642792940 CET	1.1.1.1	192.168.2.16	0x1ee5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		18.196.145.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.642792940 CET	1.1.1.1	192.168.2.16	0x1ee5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		52.29.88.124	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.642792940 CET	1.1.1.1	192.168.2.16	0x1ee5	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.123.64.158	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:09.793430090 CET	1.1.1.1	192.168.2.16	0x8921	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.807661057 CET	1.1.1.1	192.168.2.16	0xf307	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:09.817549944 CET	1.1.1.1	192.168.2.16	0xca6b	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:10.335026979 CET	1.1.1.1	192.168.2.16	0x12a8	No error (0)	p.dtsan.net		104.21.91.54	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.335026979 CET	1.1.1.1	192.168.2.16	0x12a8	No error (0)	p.dtsan.net		172.67.167.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.337049007 CET	1.1.1.1	192.168.2.16	0x28bb	No error (0)	p.dtsan.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:10.441397905 CET	1.1.1.1	192.168.2.16	0x47a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.966968060 CET	1.1.1.1	192.168.2.16	0x808	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.966968060 CET	1.1.1.1	192.168.2.16	0x808	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.967446089 CET	1.1.1.1	192.168.2.16	0xa8b	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:10.969259977 CET	1.1.1.1	192.168.2.16	0xdd58	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.969259977 CET	1.1.1.1	192.168.2.16	0xdd58	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.969259977 CET	1.1.1.1	192.168.2.16	0xdd58	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:10.970352888 CET	1.1.1.1	192.168.2.16	0xbc4c	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:11.266263962 CET	1.1.1.1	192.168.2.16	0xaee7	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:11.266563892 CET	1.1.1.1	192.168.2.16	0x157f	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.266563892 CET	1.1.1.1	192.168.2.16	0x157f	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.266563892 CET	1.1.1.1	192.168.2.16	0x157f	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.309665918 CET	1.1.1.1	192.168.2.16	0x4f10	No error (0)	ic.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.309665918 CET	1.1.1.1	192.168.2.16	0x4f10	No error (0)	ic.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.487200022 CET	1.1.1.1	192.168.2.16	0x377a	Name error (3)	e.dlx.addthis.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.487215996 CET	1.1.1.1	192.168.2.16	0x6ba4	Name error (3)	e.dlx.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.489867926 CET	1.1.1.1	192.168.2.16	0x7e99	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.489867926 CET	1.1.1.1	192.168.2.16	0x7e99	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.627254963 CET	1.1.1.1	192.168.2.16	0x4307	Name error (3)	e.dlx.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.644826889 CET	1.1.1.1	192.168.2.16	0xc3ec	No error (0)	i.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.644826889 CET	1.1.1.1	192.168.2.16	0xc3ec	No error (0)	i.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:11.767102957 CET	1.1.1.1	192.168.2.16	0x9092	Name error (3)	e.dlx.addthis.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:52:11.768186092 CET	1.1.1.1	192.168.2.16	0xe352	Name error (3)	e.dlx.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.076711893 CET	1.1.1.1	192.168.2.16	0xbf2c	No error (0)	global.stun.twilio.com	ec2-52-66-194-55.ap-south-1.compute.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.076711893 CET	1.1.1.1	192.168.2.16	0xbf2c	No error (0)	ec2-52-66-194-55.ap-south-1.compute.amazonaws.com		52.66.194.55	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.077658892 CET	1.1.1.1	192.168.2.16	0x178e	No error (0)	counter.yadro.ru		88.212.202.52	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.077658892 CET	1.1.1.1	192.168.2.16	0x178e	No error (0)	counter.yadro.ru		88.212.201.204	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.077658892 CET	1.1.1.1	192.168.2.16	0x178e	No error (0)	counter.yadro.ru		88.212.201.198	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.174932957 CET	1.1.1.1	192.168.2.16	0x6239	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.174932957 CET	1.1.1.1	192.168.2.16	0x6239	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.184566975 CET	1.1.1.1	192.168.2.16	0xedb7	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:12.192998886 CET	1.1.1.1	192.168.2.16	0xbb0b	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.192998886 CET	1.1.1.1	192.168.2.16	0xbb0b	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.192998886 CET	1.1.1.1	192.168.2.16	0xbb0b	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.192998886 CET	1.1.1.1	192.168.2.16	0xbb0b	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.192998886 CET	1.1.1.1	192.168.2.16	0xbb0b	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.194236040 CET	1.1.1.1	192.168.2.16	0x5f52	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:12.217657089 CET	1.1.1.1	192.168.2.16	0xaa65	No error (0)	www.recaptcha.net		172.217.19.163	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.219194889 CET	1.1.1.1	192.168.2.16	0xf4d5	No error (0)	tags.crwdcntrl.net		108.139.60.56	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.219194889 CET	1.1.1.1	192.168.2.16	0xf4d5	No error (0)	tags.crwdcntrl.net		108.139.60.106	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.219194889 CET	1.1.1.1	192.168.2.16	0xf4d5	No error (0)	tags.crwdcntrl.net		108.139.60.59	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.219194889 CET	1.1.1.1	192.168.2.16	0xf4d5	No error (0)	tags.crwdcntrl.net		108.139.60.123	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.243612051 CET	1.1.1.1	192.168.2.16	0x7711	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.337287903 CET	1.1.1.1	192.168.2.16	0x9106	No error (0)	global.stun.twilio.com	ec2-52-66-194-55.ap-south-1.compute.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.338232994 CET	1.1.1.1	192.168.2.16	0x739b	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:12.460042000 CET	1.1.1.1	192.168.2.16	0x3c27	No error (0)	deliver.vkcdnservice.com	0i0i0i0.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.599415064 CET	1.1.1.1	192.168.2.16	0x44a7	No error (0)	a.labadena.com		136.243.70.253	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.637088060 CET	1.1.1.1	192.168.2.16	0x3108	No error (0)	deliver.vkcdnservice.com	0i0i0i0.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.637088060 CET	1.1.1.1	192.168.2.16	0x3108	No error (0)	0i0i0i0.com		136.243.70.253	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.637387037 CET	1.1.1.1	192.168.2.16	0x1369	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.640203953 CET	1.1.1.1	192.168.2.16	0x58cd	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.726104975 CET	1.1.1.1	192.168.2.16	0xa828	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.768079042 CET	1.1.1.1	192.168.2.16	0x3d41	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.864012957 CET	1.1.1.1	192.168.2.16	0x2c05	No error (0)	wss.commentsmodule.com		51.195.4.167	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878056049 CET	1.1.1.1	192.168.2.16	0x9320	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878695965 CET	1.1.1.1	192.168.2.16	0x67eb	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878695965 CET	1.1.1.1	192.168.2.16	0x67eb	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878695965 CET	1.1.1.1	192.168.2.16	0x67eb	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878695965 CET	1.1.1.1	192.168.2.16	0x67eb	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.878695965 CET	1.1.1.1	192.168.2.16	0x67eb	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.924515009 CET	1.1.1.1	192.168.2.16	0x60db	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.924515009 CET	1.1.1.1	192.168.2.16	0x60db	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.924515009 CET	1.1.1.1	192.168.2.16	0x60db	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.924515009 CET	1.1.1.1	192.168.2.16	0x60db	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.955235004 CET	1.1.1.1	192.168.2.16	0x37d	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:12.955246925 CET	1.1.1.1	192.168.2.16	0x606e	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:12.955246925 CET	1.1.1.1	192.168.2.16	0x606e	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		18.196.145.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.955246925 CET	1.1.1.1	192.168.2.16	0x606e	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		52.29.88.124	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.955246925 CET	1.1.1.1	192.168.2.16	0x606e	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.123.64.158	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.956310034 CET	1.1.1.1	192.168.2.16	0xcc82	No error (0)	p.dtsan.net		104.21.91.54	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.956310034 CET	1.1.1.1	192.168.2.16	0xcc82	No error (0)	p.dtsan.net		172.67.167.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957303047 CET	1.1.1.1	192.168.2.16	0xfaae	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:12.957550049 CET	1.1.1.1	192.168.2.16	0x368	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:13.044143915 CET	1.1.1.1	192.168.2.16	0x40ab	No error (0)	p.dtsan.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:13.045380116 CET	1.1.1.1	192.168.2.16	0x2d60	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.045380116 CET	1.1.1.1	192.168.2.16	0x2d60	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.045380116 CET	1.1.1.1	192.168.2.16	0x2d60	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.047014952 CET	1.1.1.1	192.168.2.16	0x72e6	No error (0)	tags.crwdcntrl.net		18.155.129.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.047014952 CET	1.1.1.1	192.168.2.16	0x72e6	No error (0)	tags.crwdcntrl.net		18.155.129.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.047014952 CET	1.1.1.1	192.168.2.16	0x72e6	No error (0)	tags.crwdcntrl.net		18.155.129.56	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.047014952 CET	1.1.1.1	192.168.2.16	0x72e6	No error (0)	tags.crwdcntrl.net		18.155.129.39	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.097181082 CET	1.1.1.1	192.168.2.16	0xf447	No error (0)	stun2.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:13.136976957 CET	1.1.1.1	192.168.2.16	0xb53d	No error (0)	cm.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010011911 CET	1.1.1.1	192.168.2.16	0xfe48	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010011911 CET	1.1.1.1	192.168.2.16	0xfe48	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010011911 CET	1.1.1.1	192.168.2.16	0xfe48	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010011911 CET	1.1.1.1	192.168.2.16	0xfe48	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010011911 CET	1.1.1.1	192.168.2.16	0xfe48	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.010965109 CET	1.1.1.1	192.168.2.16	0x55c1	No error (0)	unpkg.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:14.049304008 CET	1.1.1.1	192.168.2.16	0x3c3	No error (0)	i.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.049304008 CET	1.1.1.1	192.168.2.16	0x3c3	No error (0)	i.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.404175997 CET	1.1.1.1	192.168.2.16	0xf973	No error (0)	stun.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.415397882 CET	1.1.1.1	192.168.2.16	0x9251	No error (0)	hqq.to		190.115.19.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.495248079 CET	1.1.1.1	192.168.2.16	0x764b	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Dec 17, 2024 11:52:14.585102081 CET	1.1.1.1	192.168.2.16	0xedf4	No error (0)	commentsmodule.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:14.585736990 CET	1.1.1.1	192.168.2.16	0x4d8d	No error (0)	commentsmodule.com		172.67.198.57	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.585736990 CET	1.1.1.1	192.168.2.16	0x4d8d	No error (0)	commentsmodule.com		104.21.44.89	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.642364979 CET	1.1.1.1	192.168.2.16	0xe69e	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Dec 17, 2024 11:52:14.929219007 CET	1.1.1.1	192.168.2.16	0x211a	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:14.930700064 CET	1.1.1.1	192.168.2.16	0x1bcb	No error (0)	googleads.g.doubleclick.net		172.217.19.2	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.990633965 CET	1.1.1.1	192.168.2.16	0xa8de	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.990633965 CET	1.1.1.1	192.168.2.16	0xa8de	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.990633965 CET	1.1.1.1	192.168.2.16	0xa8de	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.990633965 CET	1.1.1.1	192.168.2.16	0xa8de	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:14.998565912 CET	1.1.1.1	192.168.2.16	0x2ece	Name error (3)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:52:15.001032114 CET	1.1.1.1	192.168.2.16	0xccb3	Name error (3)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:15.139938116 CET	1.1.1.1	192.168.2.16	0xcaf7	Name error (3)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.899960995 CET	1.1.1.1	192.168.2.16	0x3b60	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.992790937 CET	1.1.1.1	192.168.2.16	0x3682	No error (0)	ps.eyeota.net		3.124.210.90	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:16.993612051 CET	1.1.1.1	192.168.2.16	0xc6ab	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:17.597789049 CET	1.1.1.1	192.168.2.16	0xebd0	No error (0)	commentsmodule.com		104.21.44.89	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:17.597789049 CET	1.1.1.1	192.168.2.16	0xebd0	No error (0)	commentsmodule.com		172.67.198.57	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:17.599040985 CET	1.1.1.1	192.168.2.16	0xa9cb	No error (0)	commentsmodule.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:18.316179991 CET	1.1.1.1	192.168.2.16	0x2d5	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:18.316535950 CET	1.1.1.1	192.168.2.16	0xdaa3	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:18.316535950 CET	1.1.1.1	192.168.2.16	0xdaa3	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:18.316535950 CET	1.1.1.1	192.168.2.16	0xdaa3	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.204828978 CET	1.1.1.1	192.168.2.16	0xd2c	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.204828978 CET	1.1.1.1	192.168.2.16	0xd2c	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.204828978 CET	1.1.1.1	192.168.2.16	0xd2c	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.205357075 CET	1.1.1.1	192.168.2.16	0x59d4	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Dec 17, 2024 11:52:20.456859112 CET	1.1.1.1	192.168.2.16	0x37e7	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:20.457740068 CET	1.1.1.1	192.168.2.16	0x3ff9	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:20.457740068 CET	1.1.1.1	192.168.2.16	0x3ff9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		52.59.126.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.457740068 CET	1.1.1.1	192.168.2.16	0x3ff9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.80.195	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.457740068 CET	1.1.1.1	192.168.2.16	0x3ff9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.194.154.81	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.515904903 CET	1.1.1.1	192.168.2.16	0xecc2	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.981642962 CET	1.1.1.1	192.168.2.16	0x3392	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:20.999599934 CET	1.1.1.1	192.168.2.16	0x72e1	No error (0)	cms.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:20.999599934 CET	1.1.1.1	192.168.2.16	0x72e1	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.204	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:20.999599934 CET	1.1.1.1	192.168.2.16	0x72e1	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.206	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.434567928 CET	1.1.1.1	192.168.2.16	0xce9b	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.434567928 CET	1.1.1.1	192.168.2.16	0xce9b	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.436731100 CET	1.1.1.1	192.168.2.16	0xfd65	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.436731100 CET	1.1.1.1	192.168.2.16	0xfd65	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.439107895 CET	1.1.1.1	192.168.2.16	0xaae	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.712253094 CET	1.1.1.1	192.168.2.16	0x5022	No error (0)	profitableexactly.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.988620996 CET	1.1.1.1	192.168.2.16	0xf3a3	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.991355896 CET	1.1.1.1	192.168.2.16	0x9677	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:22.991355896 CET	1.1.1.1	192.168.2.16	0x9677	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		52.59.126.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.991355896 CET	1.1.1.1	192.168.2.16	0x9677	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.194.154.81	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:22.991355896 CET	1.1.1.1	192.168.2.16	0x9677	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.80.195	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.263861895 CET	1.1.1.1	192.168.2.16	0xff63	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.263861895 CET	1.1.1.1	192.168.2.16	0xff63	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.204	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.263861895 CET	1.1.1.1	192.168.2.16	0xff63	No error (0)	dcs-ups.g03.yahoodns.net		188.125.88.206	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		52.55.72.170	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		3.92.248.190	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		52.202.190.25	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		35.173.214.6	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		3.208.153.251	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		52.73.207.134	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		52.1.235.70	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332106113 CET	1.1.1.1	192.168.2.16	0x6daa	No error (0)	idaas-ext.cph.liveintent.com		3.218.55.33	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332129002 CET	1.1.1.1	192.168.2.16	0x314f	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.332592010 CET	1.1.1.1	192.168.2.16	0xdfb2	No error (0)	bcp.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.340390921 CET	1.1.1.1	192.168.2.16	0x77b0	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.340390921 CET	1.1.1.1	192.168.2.16	0x77b0	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.410171032 CET	1.1.1.1	192.168.2.16	0xb6c6	No error (0)	api.intentiq.com		99.86.91.52	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.410171032 CET	1.1.1.1	192.168.2.16	0xb6c6	No error (0)	api.intentiq.com		99.86.91.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.410171032 CET	1.1.1.1	192.168.2.16	0xb6c6	No error (0)	api.intentiq.com		99.86.91.41	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.410171032 CET	1.1.1.1	192.168.2.16	0xb6c6	No error (0)	api.intentiq.com		99.86.91.40	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.420360088 CET	1.1.1.1	192.168.2.16	0x56bc	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.422151089 CET	1.1.1.1	192.168.2.16	0xfe2f	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.426208019 CET	1.1.1.1	192.168.2.16	0x1651	No error (0)	thrtle.com		52.204.65.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.426208019 CET	1.1.1.1	192.168.2.16	0x1651	No error (0)	thrtle.com		34.233.219.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.426208019 CET	1.1.1.1	192.168.2.16	0x1651	No error (0)	thrtle.com		23.21.74.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.426208019 CET	1.1.1.1	192.168.2.16	0x1651	No error (0)	thrtle.com		52.6.98.243	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.426208019 CET	1.1.1.1	192.168.2.16	0x1651	No error (0)	thrtle.com		54.225.117.250	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.473555088 CET	1.1.1.1	192.168.2.16	0x368f	No error (0)	ups.analytics.yahoo.com	dcs-ups.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:23.528678894 CET	1.1.1.1	192.168.2.16	0x6ff	No error (0)	track2.securedvisit.com		44.217.149.174	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:23.528678894 CET	1.1.1.1	192.168.2.16	0x6ff	No error (0)	track2.securedvisit.com		54.84.23.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:24.147212982 CET	1.1.1.1	192.168.2.16	0xb8e9	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:24.147212982 CET	1.1.1.1	192.168.2.16	0xb8e9	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:24.147672892 CET	1.1.1.1	192.168.2.16	0xb1ca	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:24.147672892 CET	1.1.1.1	192.168.2.16	0xb1ca	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:25.040537119 CET	1.1.1.1	192.168.2.16	0x625	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.045887947 CET	1.1.1.1	192.168.2.16	0xf08f	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.496469021 CET	1.1.1.1	192.168.2.16	0x296f	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:25.496503115 CET	1.1.1.1	192.168.2.16	0x6734	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:25.782116890 CET	1.1.1.1	192.168.2.16	0x7759	No error (0)	track2.securedvisit.com		44.217.149.174	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:25.782116890 CET	1.1.1.1	192.168.2.16	0x7759	No error (0)	track2.securedvisit.com		54.84.23.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.152923107 CET	1.1.1.1	192.168.2.16	0x9324	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.153505087 CET	1.1.1.1	192.168.2.16	0x5879	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.183902025 CET	1.1.1.1	192.168.2.16	0xe2f3	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.183902025 CET	1.1.1.1	192.168.2.16	0xe2f3	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.224.20.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.43.241.57	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.200.40.103	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.228.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.40.152.216	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.184180021 CET	1.1.1.1	192.168.2.16	0xdfad	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.229.119.177	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:26.593039036 CET	1.1.1.1	192.168.2.16	0xfcb4	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.593039036 CET	1.1.1.1	192.168.2.16	0xfcb4	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.593054056 CET	1.1.1.1	192.168.2.16	0x2ba6	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.593054056 CET	1.1.1.1	192.168.2.16	0x2ba6	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:26.859683990 CET	1.1.1.1	192.168.2.16	0x82fa	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:27.515672922 CET	1.1.1.1	192.168.2.16	0x9d6f	No error (0)	ps.eyeota.net		3.124.210.90	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.341334105 CET	1.1.1.1	192.168.2.16	0x4d4e	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:28.341418982 CET	1.1.1.1	192.168.2.16	0x9ed7	No error (0)	agent.intentiq.com	agent.intentiq.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:28.476485968 CET	1.1.1.1	192.168.2.16	0x6beb	No error (0)	sync.intentiq.com		13.249.9.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.476485968 CET	1.1.1.1	192.168.2.16	0x6beb	No error (0)	sync.intentiq.com		13.249.9.121	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.476485968 CET	1.1.1.1	192.168.2.16	0x6beb	No error (0)	sync.intentiq.com		13.249.9.120	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:28.476485968 CET	1.1.1.1	192.168.2.16	0x6beb	No error (0)	sync.intentiq.com		13.249.9.80	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.341763020 CET	1.1.1.1	192.168.2.16	0x627	No error (0)	a.dtsan.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:30.430660009 CET	1.1.1.1	192.168.2.16	0xdd92	No error (0)	a.dtsan.net		104.21.91.54	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.430660009 CET	1.1.1.1	192.168.2.16	0xdd92	No error (0)	a.dtsan.net		172.67.167.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.441842079 CET	1.1.1.1	192.168.2.16	0xd6c4	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:30.441842079 CET	1.1.1.1	192.168.2.16	0xd6c4	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	ce.lijit.com	ce-uw2.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	ce-uw2.lijit.com	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.224.20.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.43.241.57	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.200.40.103	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		54.188.228.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		52.40.152.216	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:30.442163944 CET	1.1.1.1	192.168.2.16	0xe13c	No error (0)	raptor-prd-uw2-alb-898559071.us-west-2.elb.amazonaws.com		44.229.119.177	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:32.140352964 CET	1.1.1.1	192.168.2.16	0x7560	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.051394939 CET	1.1.1.1	192.168.2.16	0x7c1d	No error (0)	sync.intentiq.com		13.249.9.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.051394939 CET	1.1.1.1	192.168.2.16	0x7c1d	No error (0)	sync.intentiq.com		13.249.9.121	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.051394939 CET	1.1.1.1	192.168.2.16	0x7c1d	No error (0)	sync.intentiq.com		13.249.9.120	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.051394939 CET	1.1.1.1	192.168.2.16	0x7c1d	No error (0)	sync.intentiq.com		13.249.9.80	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		100.26.82.223	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		44.195.131.226	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		23.21.232.243	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		34.198.65.183	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		100.26.91.106	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		54.89.130.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		100.24.163.168	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.340250969 CET	1.1.1.1	192.168.2.16	0x5d6b	No error (0)	rtb.adentifi.com		23.20.193.177	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.483747005 CET	1.1.1.1	192.168.2.16	0xddb3	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:33.483747005 CET	1.1.1.1	192.168.2.16	0xddb3	No error (0)	cdn.w55c.net		35.210.130.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:33.626468897 CET	1.1.1.1	192.168.2.16	0x6089	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:34.822277069 CET	1.1.1.1	192.168.2.16	0xa5de	No error (0)	a.dtsan.net		172.67.167.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:34.822277069 CET	1.1.1.1	192.168.2.16	0xa5de	No error (0)	a.dtsan.net		104.21.91.54	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:34.831937075 CET	1.1.1.1	192.168.2.16	0xa49a	No error (0)	a.dtsan.net			65	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.017787933 CET	1.1.1.1	192.168.2.16	0x765f	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		13.228.48.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		13.228.52.238	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		13.250.84.149	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		18.141.252.181	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		52.220.45.219	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		52.76.92.93	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		3.1.88.234	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.333380938 CET	1.1.1.1	192.168.2.16	0x4911	No error (0)	sync.crwdcntrl.net		13.228.141.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.587152958 CET	1.1.1.1	192.168.2.16	0x787f	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:35.587152958 CET	1.1.1.1	192.168.2.16	0x787f	No error (0)	cdn.w55c.net		35.210.130.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:35.725945950 CET	1.1.1.1	192.168.2.16	0x8b74	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692533970 CET	1.1.1.1	192.168.2.16	0xca69	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692533970 CET	1.1.1.1	192.168.2.16	0xca69	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692533970 CET	1.1.1.1	192.168.2.16	0xca69	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.192.25	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.146.29	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.212.37	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.14.47	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.137.139	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.126.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.211.121.244	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:39.692898035 CET	1.1.1.1	192.168.2.16	0x5fcd	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.89.197	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.363100052 CET	1.1.1.1	192.168.2.16	0xb19b	No error (0)	thrtle.com		54.225.117.250	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.363100052 CET	1.1.1.1	192.168.2.16	0xb19b	No error (0)	thrtle.com		52.204.65.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.363100052 CET	1.1.1.1	192.168.2.16	0xb19b	No error (0)	thrtle.com		52.6.98.243	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.363100052 CET	1.1.1.1	192.168.2.16	0xb19b	No error (0)	thrtle.com		23.21.74.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:40.363100052 CET	1.1.1.1	192.168.2.16	0xb19b	No error (0)	thrtle.com		34.233.219.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		35.170.46.82	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		54.156.21.112	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		3.219.79.107	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		52.204.170.218	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		52.86.216.144	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		3.214.248.204	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		44.214.168.86	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:42.566268921 CET	1.1.1.1	192.168.2.16	0xd147	No error (0)	sync.srv.stackadapt.com		35.153.85.19	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:46.673459053 CET	1.1.1.1	192.168.2.16	0x2fbb	No error (0)	thrtl.redinuid.imrworldwide.com	simple-redirect.redinuid.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:46.673459053 CET	1.1.1.1	192.168.2.16	0x2fbb	No error (0)	simple-redirect.redinuid.sre.nielsen.com	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:47.312333107 CET	1.1.1.1	192.168.2.16	0x1028	No error (0)	thrtl.redinuid.imrworldwide.com	simple-redirect.redinuid.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:47.312333107 CET	1.1.1.1	192.168.2.16	0x1028	No error (0)	simple-redirect.redinuid.sre.nielsen.com	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:47.312333107 CET	1.1.1.1	192.168.2.16	0x1028	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		34.243.110.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:47.312333107 CET	1.1.1.1	192.168.2.16	0x1028	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		108.128.195.90	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:47.312333107 CET	1.1.1.1	192.168.2.16	0x1028	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		34.246.255.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:47.315399885 CET	1.1.1.1	192.168.2.16	0xb145	No error (0)	thrtl.redinuid.imrworldwide.com	simple-redirect.redinuid.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:47.315399885 CET	1.1.1.1	192.168.2.16	0xb145	No error (0)	simple-redirect.redinuid.sre.nielsen.com	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:47.315399885 CET	1.1.1.1	192.168.2.16	0xb145	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		34.243.110.68	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:47.315399885 CET	1.1.1.1	192.168.2.16	0xb145	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		108.128.195.90	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:47.315399885 CET	1.1.1.1	192.168.2.16	0xb145	No error (0)	simple-redirect-eu-west-1-kaas-blue.sre.nielsen.com		34.246.255.164	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.327603102 CET	1.1.1.1	192.168.2.16	0xbd40	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:49.327603102 CET	1.1.1.1	192.168.2.16	0xbd40	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.75.86.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.327603102 CET	1.1.1.1	192.168.2.16	0xbd40	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		52.197.189.192	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.327603102 CET	1.1.1.1	192.168.2.16	0xbd40	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		18.178.16.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.327603102 CET	1.1.1.1	192.168.2.16	0xbd40	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.73.95.121	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.329591036 CET	1.1.1.1	192.168.2.16	0x6c85	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:49.889288902 CET	1.1.1.1	192.168.2.16	0x1125	No error (0)	nlsn.thrtle.com		52.6.98.243	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.889288902 CET	1.1.1.1	192.168.2.16	0x1125	No error (0)	nlsn.thrtle.com		54.225.117.250	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.889288902 CET	1.1.1.1	192.168.2.16	0x1125	No error (0)	nlsn.thrtle.com		23.21.74.44	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.889288902 CET	1.1.1.1	192.168.2.16	0x1125	No error (0)	nlsn.thrtle.com		52.204.65.193	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:49.889288902 CET	1.1.1.1	192.168.2.16	0x1125	No error (0)	nlsn.thrtle.com		34.233.219.14	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:51.068279028 CET	1.1.1.1	192.168.2.16	0x687f	Name error (3)	duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.26	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.251713991 CET	1.1.1.1	192.168.2.16	0x7e59	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.165.220.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:52.397891045 CET	1.1.1.1	192.168.2.16	0x4467	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:52.397891045 CET	1.1.1.1	192.168.2.16	0x4467	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:53.322412968 CET	1.1.1.1	192.168.2.16	0x93f7	No error (0)	ps.eyeota.net		18.184.216.10	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.322702885 CET	1.1.1.1	192.168.2.16	0xd628	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:53.322702885 CET	1.1.1.1	192.168.2.16	0xd628	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.322702885 CET	1.1.1.1	192.168.2.16	0xd628	No error (0)	pixel.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.323550940 CET	1.1.1.1	192.168.2.16	0x38ed	No error (0)	live.rezync.com		52.84.174.78	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.323550940 CET	1.1.1.1	192.168.2.16	0x38ed	No error (0)	live.rezync.com		52.84.174.63	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.323550940 CET	1.1.1.1	192.168.2.16	0x38ed	No error (0)	live.rezync.com		52.84.174.30	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.323550940 CET	1.1.1.1	192.168.2.16	0x38ed	No error (0)	live.rezync.com		52.84.174.89	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.324979067 CET	1.1.1.1	192.168.2.16	0x9362	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:53.326618910 CET	1.1.1.1	192.168.2.16	0xf9e4	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:53.329545975 CET	1.1.1.1	192.168.2.16	0xe335	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:53.329545975 CET	1.1.1.1	192.168.2.16	0xe335	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		18.178.16.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.329545975 CET	1.1.1.1	192.168.2.16	0xe335	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.75.86.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.329545975 CET	1.1.1.1	192.168.2.16	0xe335	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		52.197.189.192	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.329545975 CET	1.1.1.1	192.168.2.16	0xe335	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.73.95.121	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.389147997 CET	1.1.1.1	192.168.2.16	0x82ed	Name error (3)	e.dlx.addthis.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:52:53.391813040 CET	1.1.1.1	192.168.2.16	0x7ef	Name error (3)	e.dlx.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:53.531781912 CET	1.1.1.1	192.168.2.16	0x26a6	Name error (3)	e.dlx.addthis.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.312511921 CET	1.1.1.1	192.168.2.16	0x33fd	No error (0)	partner.mediawallahscript.com	mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.336488008 CET	1.1.1.1	192.168.2.16	0xc52e	No error (0)	partner.mediawallahscript.com	mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.336488008 CET	1.1.1.1	192.168.2.16	0xc52e	No error (0)	mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com		52.87.7.90	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.336488008 CET	1.1.1.1	192.168.2.16	0xc52e	No error (0)	mw-alb-traffic-pixel.5hs8vdbqmy.us-east-1.elasticbeanstalk.com		18.211.169.106	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.382690907 CET	1.1.1.1	192.168.2.16	0x75c0	Name error (3)	tags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.483067989 CET	1.1.1.1	192.168.2.16	0xd670	Name error (3)	tags.bluekai.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:52:55.559298992 CET	1.1.1.1	192.168.2.16	0x8e9	Name error (3)	tags.bluekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.709041119 CET	1.1.1.1	192.168.2.16	0x39ca	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.709041119 CET	1.1.1.1	192.168.2.16	0x39ca	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.709933996 CET	1.1.1.1	192.168.2.16	0xb700	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.709933996 CET	1.1.1.1	192.168.2.16	0xb700	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.712364912 CET	1.1.1.1	192.168.2.16	0x6df9	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.712364912 CET	1.1.1.1	192.168.2.16	0x6df9	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.712364912 CET	1.1.1.1	192.168.2.16	0x6df9	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:55.713764906 CET	1.1.1.1	192.168.2.16	0xa62b	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:55.713764906 CET	1.1.1.1	192.168.2.16	0xa62b	No error (0)	image6v2.pubmnet.com	pugmaster-sg4c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:56.249212980 CET	1.1.1.1	192.168.2.16	0xd4a3	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:52:56.249212980 CET	1.1.1.1	192.168.2.16	0xd4a3	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		52.197.189.192	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:56.249212980 CET	1.1.1.1	192.168.2.16	0xd4a3	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.75.86.132	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:56.249212980 CET	1.1.1.1	192.168.2.16	0xd4a3	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		35.73.95.121	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:56.249212980 CET	1.1.1.1	192.168.2.16	0xd4a3	No error (0)	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		18.178.16.127	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:52:56.250045061 CET	1.1.1.1	192.168.2.16	0xc6f9	No error (0)	aa.agkn.com	ActivationEdge-activation-886544353.ap-northeast-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:00.215953112 CET	1.1.1.1	192.168.2.16	0x9772	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		35.173.214.6	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		52.1.235.70	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		54.80.88.99	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		54.236.128.166	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		18.214.213.42	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		52.205.26.233	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		34.201.214.139	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:00.216893911 CET	1.1.1.1	192.168.2.16	0xeef	No error (0)	idaas-ext.cph.liveintent.com		52.3.70.0	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:01.676357031 CET	1.1.1.1	192.168.2.16	0xff2f	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:01.676357031 CET	1.1.1.1	192.168.2.16	0xff2f	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:01.676357031 CET	1.1.1.1	192.168.2.16	0xff2f	No error (0)	um.simpli.fi		35.204.201.36	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:02.411712885 CET	1.1.1.1	192.168.2.16	0x874	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:03.345854044 CET	1.1.1.1	192.168.2.16	0x5190	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:03.345854044 CET	1.1.1.1	192.168.2.16	0x5190	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:03.346128941 CET	1.1.1.1	192.168.2.16	0x6872	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:03.484987020 CET	1.1.1.1	192.168.2.16	0xb350	No error (0)	idsync.reson8.com	idsync.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:03.489454985 CET	1.1.1.1	192.168.2.16	0xe03a	No error (0)	idsync.reson8.com	idsync.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:04.341149092 CET	1.1.1.1	192.168.2.16	0x1aa4	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:06.959532976 CET	1.1.1.1	192.168.2.16	0x49ba	No error (0)	s.amazon-adsystem.com		98.82.158.241	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:07.257492065 CET	1.1.1.1	192.168.2.16	0x19c9	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:07.345571995 CET	1.1.1.1	192.168.2.16	0x7c32	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:08.194235086 CET	1.1.1.1	192.168.2.16	0x722b	No error (0)	wss.commentsmodule.com		51.195.4.167	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.197371960 CET	1.1.1.1	192.168.2.16	0x8991	Name error (3)	_8443._https.wss.commentsmodule.com	none	none	65	IN (0x0001)	false
Dec 17, 2024 11:53:08.287139893 CET	1.1.1.1	192.168.2.16	0xf3e6	No error (0)	videocdnmetrika.com			65	IN (0x0001)	false
Dec 17, 2024 11:53:08.287235022 CET	1.1.1.1	192.168.2.16	0x9410	No error (0)	videocdnmetrika.com		104.21.38.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.287235022 CET	1.1.1.1	192.168.2.16	0x9410	No error (0)	videocdnmetrika.com		172.67.221.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:08.355717897 CET	1.1.1.1	192.168.2.16	0x9d1a	No error (0)	cdn-s8.cfglobalcdn.com	s8.netu.tv		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:08.533444881 CET	1.1.1.1	192.168.2.16	0x9dea	No error (0)	cdn-s8.cfglobalcdn.com	s8.netu.tv		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:08.533444881 CET	1.1.1.1	192.168.2.16	0x9dea	No error (0)	s8.netu.tv		213.186.120.178	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:10.545264959 CET	1.1.1.1	192.168.2.16	0x48e9	No error (0)	s.amazon-adsystem.com		98.82.156.207	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.494025946 CET	1.1.1.1	192.168.2.16	0x19b7	No error (0)	cdn-s8.cfglobalcdn.com	s8.netu.tv		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:11.494025946 CET	1.1.1.1	192.168.2.16	0x19b7	No error (0)	s8.netu.tv		213.186.120.178	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.552294970 CET	1.1.1.1	192.168.2.16	0x3e6e	No error (0)	videocdnmetrika.com		104.21.38.98	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.552294970 CET	1.1.1.1	192.168.2.16	0x3e6e	No error (0)	videocdnmetrika.com		172.67.221.128	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.552313089 CET	1.1.1.1	192.168.2.16	0x390c	No error (0)	videocdnmetrika.com			65	IN (0x0001)	false
Dec 17, 2024 11:53:11.594122887 CET	1.1.1.1	192.168.2.16	0x32fb	No error (0)	cdn-s8.cfglobalcdn.com	s8.netu.tv		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		34.253.17.104	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		34.248.19.126	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		34.246.77.188	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		52.48.183.31	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		63.32.148.48	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		52.17.153.181	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		52.213.68.253	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.635869026 CET	1.1.1.1	192.168.2.16	0x4eb8	No error (0)	bcp.crwdcntrl.net		108.128.75.152	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.655356884 CET	1.1.1.1	192.168.2.16	0x76ae	No error (0)	videocdnshop.com		172.67.199.179	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.655356884 CET	1.1.1.1	192.168.2.16	0x76ae	No error (0)	videocdnshop.com		104.21.52.135	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:11.738054037 CET	1.1.1.1	192.168.2.16	0x251c	No error (0)	videocdnshop.com			65	IN (0x0001)	false
Dec 17, 2024 11:53:13.112312078 CET	1.1.1.1	192.168.2.16	0xd098	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.112312078 CET	1.1.1.1	192.168.2.16	0xd098	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.112312078 CET	1.1.1.1	192.168.2.16	0xd098	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.112312078 CET	1.1.1.1	192.168.2.16	0xd098	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.131618977 CET	1.1.1.1	192.168.2.16	0x68ac	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 11:53:13.131618977 CET	1.1.1.1	192.168.2.16	0x68ac	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.131618977 CET	1.1.1.1	192.168.2.16	0x68ac	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.131618977 CET	1.1.1.1	192.168.2.16	0x68ac	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.131618977 CET	1.1.1.1	192.168.2.16	0x68ac	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Dec 17, 2024 11:53:13.296250105 CET	1.1.1.1	192.168.2.16	0x6c37	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:09 UTC	679	OUT	GET /watch-movies/passengers.html HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:10 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:10 UTC	897	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 64 34 6d 6f 41 48 72 48 71 2f 6e 59 7a 71 35 56 51 6e 79 63 79 6f 67 41 4d 67 73 75 6e 66 51 57 53 71 6c 45 50 56 6b 56 58 32 54 6b 66 62 4d 6d 7a 38 6d 69 69 50 38 41 4d 43 2f 5a 55 78 57 2f 45 64 74 51 4f 7a 6b 2b 53 67 71 43 51 58 68 4a 48 72 56 74 31 67 49 50 44 43 6d 30 70 43 61 70 2f 76 75 62 53 38 50 33 30 6d 41 3d 24 44 46 48 33 4a 68 48 56 52 4c 78 5a 47 6d 73 58 32 6c 43 74 63 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: d4moAHrHq/nYzq5VQnycyogAMgsunfQWSqlEPVkVX2TkfbMmz8miiP8AMC/ZUxW/EdtQOzk+SgqCQXhJHrVt1gIPDCm0pCap/vubS8P30mA=$DFH3JhHVRLxZGmsX2lCtcg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 32 33 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2348<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49702	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:10 UTC	951	OUT	GET /watch-movies/passengers.html HTTP/1.1 Host: alluc.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:10 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:10 UTC	901	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 79 77 4d 32 4a 44 61 7a 42 52 2f 63 63 63 63 6b 6f 57 50 6f 6c 56 35 6e 68 76 77 4d 2b 45 6a 42 32 50 67 57 36 55 37 39 67 57 68 6f 4b 42 37 47 6d 74 71 41 63 48 6b 54 78 51 55 44 5a 37 77 77 32 47 48 46 5a 71 6f 37 42 49 79 5a 6c 56 76 72 4b 67 77 61 62 66 69 4e 4b 52 35 31 38 65 32 2b 36 56 6d 39 47 78 4f 74 6a 38 6f 3d 24 4d 66 6c 31 34 67 4a 44 4a 47 71 64 30 6e 59 36 4f 4e 32 54 35 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: ywM2JDazBR/cccckoWPolV5nhvwM+EjB2PgW6U79gWhoKB7GmtqAcHkTxQUDZ7ww2GHFZqo7BIyZlVvrKgwabfiNKR518e2+6Vm9GxOtj8o=$Mfl14gJDJGqd0nY6ON2T5A==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:10 UTC	552	IN	Data Raw: 32 33 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 23f3<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d Data Ascii: Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 61 6c 6c 75 63 2e 63 6f 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 38 66 33 36 35 62 33 64 64 61 65 31 34 32 61 31 27 2c 63 48 3a 20 27 75 39 52 39 6b 39 62 41 79 4b 5a 78 50 6a 41 66 30 4d 47 38 4a 70 59 6a 67 62 66 6f 4a 4e 46 73 5a 6d 30 30 37 78 74 64 43 58 41 2d 31 37 33 34 34 33 32 36 37 30 2d 31 2e 32 2e 31 2e 31 2d 56 79 67 51 4e 4c 5f 30 51 71 4a 4a 7a 7a 62 35 7a 36 56 62 72 52 53 4c Data Ascii: okies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "alluc.co",cType: 'managed',cRay: '8f365b3ddae142a1',cH: 'u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSL
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 4e 31 59 46 77 67 79 45 5f 4a 39 65 54 69 79 61 4c 35 51 73 45 50 6c 68 61 5f 54 36 56 41 48 43 33 46 43 57 6f 62 4e 32 54 78 49 49 59 55 31 49 32 41 33 61 32 34 41 47 6b 35 4b 79 58 6e 5a 6f 4e 4b 62 44 75 6f 38 2e 31 39 49 7a 4a 52 74 68 72 51 6a 68 30 53 39 2e 31 55 55 69 74 4d 69 64 74 72 63 56 32 4c 34 53 35 48 49 6c 5f 70 6c 67 76 6c 77 4c 46 36 50 6e 68 35 51 6f 44 2e 37 6f 46 68 49 59 44 6d 75 35 46 2e 67 4e 49 4c 5a 71 4f 43 76 6f 6d 64 79 52 6b 73 4e 34 51 79 6f 33 46 30 4f 4c 5a 43 4d 37 62 45 4e 50 32 38 34 36 4c 47 77 69 4e 67 4b 7a 38 38 48 54 76 79 52 32 50 72 61 52 42 6a 75 78 45 61 52 37 33 4f 68 64 2e 33 6a 43 4b 75 78 6f 6a 53 32 74 74 42 49 62 37 39 52 44 54 41 52 6b 4f 70 66 36 47 39 4f 38 43 63 41 45 43 46 63 53 39 57 4a 38 74 47 68 Data Ascii: N1YFwgyE_J9eTiyaL5QsEPlha_T6VAHC3FCWobN2TxIIYU1I2A3a24AGk5KyXnZoNKbDuo8.19IzJRthrQjh0S9.1UUitMidtrcV2L4S5HIl_plgvlwLF6Pnh5QoD.7oFhIYDmu5F.gNILZqOCvomdyRksN4Qyo3F0OLZCM7bENP2846LGwiNgKz88HTvyR2PraRBjuxEaR73Ohd.3jCKuxojS2ttBIb79RDTARkOpf6G9O8CcAECFcS9WJ8tGh
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 70 5a 78 6e 73 57 34 78 30 79 62 50 36 6b 69 74 2e 68 45 44 72 4b 51 53 55 34 65 6e 59 6a 45 54 75 32 4f 37 79 70 68 56 78 5f 52 61 78 49 4e 4b 50 6f 72 5a 47 4d 79 68 45 61 4f 5f 35 62 6c 4e 39 69 55 44 75 79 4e 51 5a 4c 4f 77 43 30 7a 6c 65 77 59 65 48 6c 75 45 43 63 7a 46 36 4c 4e 49 4f 39 77 5a 58 6c 39 46 6a 61 5f 4c 50 72 63 79 79 59 64 54 72 41 4c 6e 61 73 59 48 74 73 72 72 48 77 73 4a 77 58 41 65 35 4d 61 35 53 62 6d 56 49 56 39 58 44 64 61 55 59 39 6d 5a 78 44 78 71 36 4c 6a 64 75 74 37 6a 43 7a 56 73 65 4a 39 30 52 45 37 58 51 77 7a 70 73 37 61 6e 77 64 67 36 63 6c 52 4f 70 76 6f 42 30 71 58 52 6e 52 5f 50 48 76 46 65 5f 4a 39 6d 36 6c 43 37 62 7a 6d 66 49 76 65 4f 59 74 55 62 58 6e 32 51 6d 51 5a 45 54 42 6e 5f 34 4b 49 64 5f 4b 4d 76 6a 78 68 Data Ascii: pZxnsW4x0ybP6kit.hEDrKQSU4enYjETu2O7yphVx_RaxINKPorZGMyhEaO_5blN9iUDuyNQZLOwC0zlewYeHluECczF6LNIO9wZXl9Fja_LPrcyyYdTrALnasYHtsrrHwsJwXAe5Ma5SbmVIV9XDdaUY9mZxDxq6Ljdut7jCzVseJ90RE7XQwzps7anwdg6clROpvoB0qXRnR_PHvFe_J9m6lC7bzmfIveOYtUbXn2QmQZETBn_4KId_KMvjxh
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 64 33 58 78 6b 37 38 49 76 5f 30 34 54 41 53 70 6d 4d 6d 52 70 58 55 32 66 4a 39 48 43 31 6d 69 51 51 6c 39 68 4b 52 65 38 6d 4c 53 6d 68 67 47 73 69 6f 79 42 4f 68 64 43 55 38 43 55 58 6b 54 63 69 37 48 68 64 2e 6e 53 34 4c 78 79 46 50 4a 62 57 67 6a 49 74 64 43 32 6c 35 72 34 44 4f 36 57 46 30 4f 74 5a 71 6b 32 54 6f 5f 4b 73 6f 75 34 55 68 65 49 51 68 37 4c 4c 71 63 30 71 53 5a 41 6f 36 30 6d 70 35 43 55 46 4a 48 71 63 4e 50 49 31 39 6a 7a 6e 4e 6e 33 6e 7a 6f 37 59 52 35 63 32 47 59 6e 53 39 77 76 78 48 30 42 4a 32 64 39 62 45 35 34 33 6a 72 42 32 76 77 63 57 6a 36 38 5a 4a 79 6a 36 49 37 53 65 72 79 36 42 6f 54 41 57 48 45 65 47 76 4b 39 6e 34 31 49 63 4c 41 30 34 32 79 35 33 38 4f 44 4f 47 63 77 47 4f 67 2e 70 4e 64 6d 34 6d 51 6b 6d 47 57 54 45 49 Data Ascii: d3Xxk78Iv_04TASpmMmRpXU2fJ9HC1miQQl9hKRe8mLSmhgGsioyBOhdCU8CUXkTci7Hhd.nS4LxyFPJbWgjItdC2l5r4DO6WF0OtZqk2To_Ksou4UheIQh7LLqc0qSZAo60mp5CUFJHqcNPI19jznNn3nzo7YR5c2GYnS9wvxH0BJ2d9bE543jrB2vwcWj68ZJyj6I7Sery6BoTAWHEeGvK9n41IcLA042y538ODOGcwGOg.pNdm4mQkmGWTEI
2024-12-17 10:51:10 UTC	1369	IN	Data Raw: 7a 36 6d 4f 39 61 37 59 4f 58 63 32 6d 4f 78 33 4f 32 67 69 55 55 39 57 68 4f 54 4d 70 69 6f 5f 37 4a 52 42 70 34 50 74 4b 39 47 45 4d 4c 78 55 73 6d 61 61 6c 54 69 6a 41 4e 57 41 78 64 48 4b 48 45 33 6e 71 6f 57 4c 37 51 46 51 68 76 4b 74 56 51 65 71 76 47 4d 4a 52 4f 41 72 72 49 56 76 44 5a 61 37 33 71 53 78 75 39 2e 63 69 43 32 6c 41 78 50 72 68 77 47 5f 31 49 6f 4a 2e 36 39 35 39 4d 31 48 57 43 42 44 6d 67 50 75 30 5a 52 36 33 77 68 6b 4d 49 7a 6b 52 72 78 31 70 46 54 2e 79 31 6c 6c 33 76 66 71 55 76 56 44 32 45 65 31 31 78 74 6e 51 4a 5a 35 45 43 5a 68 35 4a 50 41 79 34 39 57 31 5f 53 31 4d 6f 75 44 42 71 33 35 38 76 44 4a 79 47 68 43 75 63 6c 37 77 50 4b 73 54 6b 64 5f 76 34 67 47 47 53 71 79 5a 71 39 35 39 4e 75 66 63 37 35 4f 2e 36 73 54 6d 48 2e Data Ascii: z6mO9a7YOXc2mOx3O2giUU9WhOTMpio_7JRBp4PtK9GEMLxUsmaalTijANWAxdHKHE3nqoWL7QFQhvKtVQeqvGMJROArrIVvDZa73qSxu9.ciC2lAxPrhwG_1IoJ.6959M1HWCBDmgPu0ZR63whkMIzkRrx1pFT.y1ll3vfqUvVD2Ee11xtnQJZ5ECZh5JPAy49W1_S1MouDBq358vDJyGhCucl7wPKsTkd_v4gGGSqyZq959Nufc75O.6sTmH.
2024-12-17 10:51:10 UTC	445	IN	Data Raw: 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 77 61 74 63 68 2d 6d 6f 76 69 65 73 5c 2f 70 61 73 73 65 6e 67 65 72 73 2e 68 74 6d 6c 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 68 45 69 59 62 57 6e 6e 4e 76 55 4a 73 54 7a 5f 58 44 62 42 4a 78 48 4f 41 6f 6a 78 36 75 5a 4b 61 6e 48 6e 69 5f 42 6b 72 57 63 2d 31 37 33 34 34 33 32 36 37 30 2d 31 2e 30 2e 31 2e 31 2d 4a 79 67 34 6c 76 38 32 75 58 39 46 74 73 70 55 6a 78 31 39 57 6d 74 50 41 6b 4d 37 42 58 75 33 6e 30 38 66 33 6f 57 Data Ascii: n.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/watch-movies\/passengers.html?__cf_chl_rt_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oW
2024-12-17 10:51:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49705	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:11 UTC	519	OUT	OPTIONS /report/v4?s=cnGR2Gv%2FnNFSEQJPvWBUUkPJUM7sWriT15jHOgkSfQzIsDRQiDARNE1tqMjVMBfszwcOWhD21ZiVANS9qTpG2TzmaPNUu8LVDt1pIltgfVwU28Tihvs1QVXgNA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://alluc.co Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 17 Dec 2024 10:51:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:13 UTC	998	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8f365b3ddae142a1 HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html?__cf_chl_rt_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:13 UTC	863	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95565 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tys5mXwtSOIHdbQYHBWPi6E1kTi%2FMa2HQ7kT2kqmu890Imx%2FzuTMbUG5OEnVBlIxf5q9cveVWO9FtGZfpmUCd%2BC6MrDdcaYRsY8lgkQZLkengXujV3ROauGpPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365b501c68438b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1830&min_rtt=1786&rtt_var=701&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1598&delivery_rate=1634938&cwnd=169&unsent_bytes=0&cid=b6ceae6d979c35ce&ts=445&x=0"
2024-12-17 10:51:13 UTC	506	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 73 75 63 63 65 73 73 5f 74 69 74 6c 65 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 22 2c 22 62 72 6f 77 73 65 72 5f 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 5f 61 75 78 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 76 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 59 6f 75 72 25 32 30 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 Data Ascii: issue%20persists.","success_title":"Verification%20successful","browser_not_supported_aux":"%25%7Bplaceholder.com%7D%20needs%20to%20verify%20you%20are%20human%20before%20proceeding.%20Your%20%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 32 30 63 61 6e 6e 6f 74 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 22 3a 22 57 61 69 74 69 6e 67 25 32 30 66 6f 72 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 74 6f 25 32 30 72 65 73 70 6f 6e 64 2e 2e 2e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 53 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 Data Ascii: 20cannot%20complete%20verification","redirecting_text":"Waiting%20for%20%25%7Bplaceholder.com%7D%20to%20respond...","stuck_helper_title":"Stuck%20on%20this%20page%3F","turnstile_overrun_description":"Stuck%20here%3F","turnstile_feedback_description":"Send
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 49 66 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 73 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 32 43 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 66 6c 61 67 67 65 64 25 32 30 61 73 25 32 30 61 25 32 30 62 6f 74 2e 25 32 30 54 72 79 25 32 30 72 65 Data Ascii: he%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","human_button_text":"Verify%20you%20are%20human","stuck_helper_explainer":"If%20you%20are%20stuck%20on%20this%20page%2C%20your%20device%20or%20connection%20has%20been%20flagged%20as%20a%20bot.%20Try%20re
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 57 2c 65 5a 2c 66 31 2c 66 Data Ascii: },"polyfills":{"testing_only_always_pass":false,"turnstile_overrun_description":false,"turnstile_feedback_description":false,"turnstile_timeout":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eO,eP,eW,eZ,f1,f
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6b 6c 42 43 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 74 54 43 6c 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 46 66 65 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 67 4c 62 64 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 43 57 62 73 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6d 55 62 4c 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 71 7a 75 62 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: ':function(h,i){return h(i)},'klBCc':function(h,i){return h>i},'tTClw':function(h,i){return h(i)},'oFfeC':function(h,i){return i\|h},'gLbdE':function(h,i){return h<<i},'CWbsA':function(h,i){return h<<i},'mUbLx':function(h,i){return h-i},'qzubO':function(h,
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 49 28 39 32 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4a 2c 6a 29 7b 72 65 74 75 72 6e 28 67 4a 3d 67 49 2c 67 4a 28 31 39 34 29 21 3d 3d 67 4a 28 31 39 34 29 29 3f 67 3f 6b 3a 28 6a 3d 27 63 66 27 2c 69 5b 67 4a 28 31 30 33 32 29 5d 5b 67 4a 28 36 39 38 29 5d 3d 3d 3d 67 4a 28 39 34 33 29 26 26 28 6a 3d 27 6a 63 27 29 2c 6a 3d 6a 2c 6a 29 3a 64 5b 67 4a 28 35 37 37 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 67 4b 29 7b 72 65 74 75 72 6e 20 67 4b 3d 67 4a 2c 67 4b 28 31 30 36 30 29 5b 67 4b 28 32 34 30 29 5d 28 6a 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 4e 2c Data Ascii: i){return h==i}},e=String[gI(926)],f={'h':function(h,gJ,j){return(gJ=gI,gJ(194)!==gJ(194))?g?k:(j='cf',i[gJ(1032)][gJ(698)]===gJ(943)&&(j='jc'),j=j,j):d[gJ(577)](null,h)?'':f.g(h,6,function(j,gK){return gK=gJ,gK(1060)[gK(240)](j)})},'g':function(i,j,o,gN,
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 63 74 5b 67 4e 28 34 30 33 29 5d 5b 67 4e 28 37 32 33 29 5d 5b 67 4e 28 36 33 36 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 64 5b 67 4e 28 35 33 39 29 5d 28 44 2c 4c 29 2c 4f 62 6a 65 63 74 5b 67 4e 28 34 30 33 29 5d 5b 67 4e 28 37 32 33 29 5d 5b 67 4e 28 36 33 36 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4e 28 34 30 33 29 5d 5b 67 4e 28 37 32 33 29 5d 5b 67 4e 28 36 33 36 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 67 4e 28 36 37 37 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 67 4e 28 38 39 37 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 67 4e 28 31 30 34 32 29 5d 28 64 5b 67 4e 28 33 37 33 29 5d 28 6f 2c 49 29 Data Ascii: ct[gN(403)][gN(723)][gN(636)](B,L)\|\|(B[L]=F++,C[L]=!0),M=d[gN(539)](D,L),Object[gN(403)][gN(723)][gN(636)](B,M))D=M;else{if(Object[gN(403)][gN(723)][gN(636)](C,D)){if(256>D[gN(677)](0)){for(x=0;d[gN(897)](x,G);I<<=1,J==j-1?(J=0,H[gN(1042)](d[gN(373)](o,I)
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 28 4f 62 6a 65 63 74 5b 67 4e 28 34 30 33 29 5d 5b 67 4e 28 37 32 33 29 5d 5b 67 4e 28 36 33 36 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 67 4e 28 36 37 37 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 67 4e 28 31 31 31 34 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 67 4e 28 35 36 38 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 67 4e 28 31 30 34 32 29 5d 28 64 5b 67 4e 28 31 38 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 67 4e 28 36 37 37 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 67 4e 28 31 31 34 35 29 5d 28 38 2c 78 29 3b 49 3d 64 5b 67 4e 28 38 37 37 29 5d 28 64 5b 67 4e 28 36 33 34 29 5d 28 49 2c 31 29 2c 31 2e 32 32 26 4e 29 2c 4a 3d 3d 64 5b 67 4e 28 33 38 35 29 5d 28 6a 2c Data Ascii: (Object[gN(403)][gN(723)][gN(636)](C,D)){if(256>D[gN(677)](0)){for(x=0;d[gN(1114)](x,G);I<<=1,J==d[gN(568)](j,1)?(J=0,H[gN(1042)](d[gN(188)](o,I)),I=0):J++,x++);for(N=D[gN(677)](0),x=0;d[gN(1145)](8,x);I=d[gN(877)](d[gN(634)](I,1),1.22&N),J==d[gN(385)](j,
2024-12-17 10:51:13 UTC	1369	IN	Data Raw: 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 67 51 3d 67 49 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 34 33 38 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 29 69 66 28 64 5b 67 51 28 32 38 36 29 5d 21 3d 3d 64 5b 67 51 28 36 31 32 29 5d 29 7b 66 6f 72 28 4c 3d 64 5b 67 51 28 38 33 30 29 5d 5b 67 51 28 31 30 36 36 29 5d 28 27 7c 27 29 2c 4d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4c 5b 4d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 Data Ascii: ,D,E,F,G,H,I,J,K,O,L,M,N){for(gQ=gI,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gQ(438)](2,2),F=1;K!=F;)if(d[gQ(286)]!==d[gQ(612)]){for(L=d[gQ(830)][gQ(1066)]('\|'),M=0;!![];){switch(L[M++]){case'0':J\|=F*(0<N?1:0);continue;case

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:13 UTC	468	OUT	POST /report/v4?s=cnGR2Gv%2FnNFSEQJPvWBUUkPJUM7sWriT15jHOgkSfQzIsDRQiDARNE1tqMjVMBfszwcOWhD21ZiVANS9qTpG2TzmaPNUu8LVDt1pIltgfVwU28Tihvs1QVXgNA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 407 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:13 UTC	407	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 31 34 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 33 2e 35 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 75 63 2e 63 6f 2f 77 61 74 63 68 2d Data Ascii: [{"age":1,"body":{"elapsed_time":3142,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.183.59","status_code":403,"type":"http.error"},"type":"network-error","url":"https://alluc.co/watch-
2024-12-17 10:51:13 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 17 Dec 2024 10:51:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49713	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:15 UTC	576	OUT	GET /turnstile/v0/g/f9063374b04d/api.js?onload=fjGVd3&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://alluc.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:15 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f365b5ee88742da-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:15 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-17 10:51:15 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49714	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:16 UTC	1311	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1 Host: alluc.co Connection: keep-alive Content-Length: 4215 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" CF-Chl-RetryAttempt: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP sec-ch-ua-platform: "Windows" Accept: / Origin: https://alluc.co Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:16 UTC	4215	OUT	Data Raw: 76 5f 38 66 33 36 35 62 33 64 64 61 65 31 34 32 61 31 3d 4e 65 73 31 43 31 51 31 46 31 62 31 47 31 56 75 6b 6a 75 6b 37 6e 73 36 43 55 38 51 38 71 46 6b 48 41 6b 43 64 31 68 54 6b 39 31 4f 65 6b 63 6b 78 71 41 6b 38 54 67 31 43 41 6b 50 31 38 65 6b 30 33 6b 39 75 64 6b 6d 38 74 6b 43 30 38 6b 71 73 6b 30 4f 37 59 66 41 55 6b 36 6e 43 58 47 79 6b 73 4f 6b 4d 6b 4b 52 50 51 43 6b 59 31 6b 4b 6c 38 35 64 6b 6f 6b 39 64 71 4a 4b 34 38 30 44 72 4d 6b 78 49 4b 5a 44 48 31 4b 6e 78 38 74 79 38 35 76 34 25 32 62 73 6b 63 31 65 71 71 31 68 6f 37 4e 6f 55 58 6b 48 4c 6b 71 32 48 2d 52 64 54 71 38 48 55 53 48 78 41 6b 73 66 32 73 71 36 6b 77 70 74 6f 49 62 74 67 6f 6d 75 34 6b 52 76 6b 76 4a 73 6b 24 76 64 6b 31 4a 32 39 76 77 6b 6b 6f 67 30 24 34 6b 43 4a 6b 6d 66 Data Ascii: v_8f365b3ddae142a1=Nes1C1Q1F1b1G1Vukjuk7ns6CU8Q8qFkHAkCd1hTk91OekckxqAk8Tg1CAkP18ek03k9udkm8tkC08kqsk0O7YfAUk6nCXGyksOkMkKRPQCkY1kKl85dkok9dqJK480DrMkxIKZDH1Knx8ty85v4%2bskc1eqq1ho7NoUXkHLkq2H-RdTq8HUSHxAksf2sq6kwptoIbtgomu4kRvkvJsk$vdk1J29vwkkog0$4kCJkmf
2024-12-17 10:51:16 UTC	868	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 13560 Connection: close cf-chl-gen: U9ggqSgFvfMI3jkbWmyhPOApQH9mcbbcGSKsUjmtstu0q5+VjBVVJL0KDmDY6Mr/MxRSZiyfosI=$sFciDnjtzGqPY1vX Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cYPRmiDJhRm%2FMr%2BgamNfKtwtfFuz6QP6Mnd3uf4B%2F63Cy1ufP9Dp7fMjBKXisAVo5C4UaCp9zbArQw4FKdZP8TWOr6vc4%2F8dG3%2FKB5MiNy2z%2FxrS%2F0aiUX3Mtw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365b6458d319cf-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1962&rtt_var=755&sent=5&recv=10&lost=0&retrans=0&sent_bytes=2815&recv_bytes=6148&delivery_rate=1432074&cwnd=252&unsent_bytes=0&cid=1060bbdf86cae664&ts=454&x=0"
2024-12-17 10:51:16 UTC	501	IN	Data Raw: 69 6e 32 44 65 6f 61 50 52 33 6c 59 67 70 4b 4d 67 70 53 4b 6b 5a 46 4d 54 71 47 6b 59 30 6d 68 6c 4a 71 52 6e 61 5a 65 6b 49 31 6a 6b 58 4a 64 6d 46 39 30 57 72 4b 6c 71 36 4b 75 74 32 2b 68 6e 6e 57 69 67 32 36 71 63 49 56 72 62 47 31 75 78 62 48 44 63 72 4b 33 75 37 57 36 77 4d 57 35 76 74 44 56 66 70 79 41 77 74 54 4b 32 64 4c 4c 31 64 7a 63 78 5a 76 4a 71 48 69 50 6b 4a 47 53 36 64 58 6e 6c 75 72 64 35 39 37 4e 34 65 37 7a 35 50 50 31 6f 73 43 6b 35 76 6a 75 2f 66 62 76 2b 51 45 42 36 63 44 74 7a 4a 79 64 74 4c 57 32 74 77 49 41 75 73 50 37 41 51 58 2b 42 41 6f 50 41 77 67 61 48 39 58 76 39 42 34 59 47 64 37 4f 37 4f 33 75 30 75 50 64 31 54 4c 42 77 74 6e 61 32 39 7a 64 33 74 2f 67 49 53 59 71 4a 43 6b 76 4e 43 67 74 50 30 54 73 43 2b 35 4c 32 76 48 Data Ascii: in2DeoaPR3lYgpKMgpSKkZFMTqGkY0mhlJqRnaZekI1jkXJdmF90WrKlq6Kut2+hnnWig26qcIVrbG1uxbHDcrK3u7W6wMW5vtDVfpyAwtTK2dLL1dzcxZvJqHiPkJGS6dXnlurd597N4e7z5PP1osCk5vju/fbv+QEB6cDtzJydtLW2twIAusP7AQX+BAoPAwgaH9Xv9B4YGd7O7O3u0uPd1TLBwtna29zd3t/gISYqJCkvNCgtP0TsC+5L2vH
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 36 79 74 72 71 2b 77 2f 51 49 43 39 2b 7a 4e 30 62 67 52 42 41 6f 42 44 52 62 4e 41 41 55 4a 41 77 67 4f 45 77 63 59 47 68 2f 5a 37 68 62 39 2b 2f 37 6c 30 75 44 55 4c 53 41 6d 48 53 6b 79 36 52 77 68 4a 52 38 6b 4b 69 38 6a 4e 44 59 37 39 52 34 4e 51 78 45 43 2b 64 6a 76 38 50 48 79 38 2f 54 31 39 76 66 34 2b 66 6f 2b 4e 53 39 55 46 68 73 43 57 6b 31 54 53 6c 5a 66 46 30 6c 4f 55 6b 78 52 56 31 78 51 59 57 4e 6f 49 30 70 4e 55 55 34 75 47 79 6b 64 64 57 68 75 5a 58 46 36 4d 6d 52 70 62 57 64 73 63 6e 64 72 66 48 36 44 50 6f 56 35 56 34 78 4a 51 69 45 34 4f 54 6f 37 50 44 30 2b 50 30 42 42 51 6b 4f 51 66 35 52 34 57 32 4e 4b 6f 70 57 62 6b 70 36 6e 58 35 47 57 6d 70 53 5a 6e 36 53 59 71 61 75 77 61 36 47 49 6c 4b 71 76 71 4a 64 78 55 47 64 6f 61 57 70 72 Data Ascii: 6ytrq+w/QIC9+zN0bgRBAoBDRbNAAUJAwgOEwcYGh/Z7hb9+/7l0uDULSAmHSky6RwhJR8kKi8jNDY79R4NQxEC+djv8PHy8/T19vf4+fo+NS9UFhsCWk1TSlZfF0lOUkxRV1xQYWNoI0pNUU4uGykddWhuZXF6MmRpbWdscndrfH6DPoV5V4xJQiE4OTo7PD0+P0BBQkOQf5R4W2NKopWbkp6nX5GWmpSZn6SYqauwa6GIlKqvqJdxUGdoaWpr
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 44 32 2f 41 4c 58 43 41 4c 6f 44 51 55 45 42 77 33 4c 71 73 48 43 77 38 54 46 78 73 66 49 79 63 72 4c 7a 50 72 37 2b 78 34 47 36 65 33 55 4c 53 41 6d 48 53 6b 79 36 52 77 68 4a 52 38 6b 4b 69 38 6a 4e 44 59 37 39 53 77 79 4e 77 30 39 4e 79 45 7a 4a 2f 33 63 38 2f 54 31 39 76 66 34 2b 66 72 37 2f 50 33 2b 52 45 59 6e 4b 78 67 66 42 6c 35 52 56 30 35 61 59 78 74 4e 55 6c 5a 51 56 56 74 67 56 47 56 6e 62 43 64 65 59 45 46 46 4d 69 73 4b 49 53 49 6a 4a 43 55 6d 4a 79 67 70 4b 69 73 73 5a 47 64 67 64 48 64 49 54 54 53 4d 66 34 56 38 69 4a 46 4a 65 34 43 45 66 6f 4f 4a 6a 6f 4b 54 6c 5a 70 56 66 34 4a 37 6a 35 4a 6a 57 6a 6c 51 55 56 4a 54 56 46 56 57 56 31 68 5a 57 6c 74 39 70 37 65 43 67 6e 46 38 59 37 75 75 74 4b 75 33 77 48 69 71 72 37 4f 74 73 72 69 39 73 Data Ascii: D2/ALXCALoDQUEBw3LqsHCw8TFxsfIycrLzPr7+x4G6e3ULSAmHSky6RwhJR8kKi8jNDY79SwyNw09NyEzJ/3c8/T19vf4+fr7/P3+REYnKxgfBl5RV05aYxtNUlZQVVtgVGVnbCdeYEFFMisKISIjJCUmJygpKissZGdgdHdITTSMf4V8iJFJe4CEfoOJjoKTlZpVf4J7j5JjWjlQUVJTVFVWV1hZWlt9p7eCgnF8Y7uutKu3wHiqr7Otsri9s
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 35 75 68 4c 39 45 4c 34 53 42 68 62 43 34 4d 54 4d 7a 65 4b 79 79 63 72 4c 7a 4d 33 4f 7a 39 44 52 30 74 50 55 4c 42 67 71 32 43 55 67 4e 51 6b 6a 4c 64 2f 39 34 53 34 70 50 76 4d 7a 4c 54 63 78 50 7a 51 49 37 64 6a 76 38 50 48 79 38 2f 54 31 39 76 66 34 2b 66 70 53 50 6c 44 2b 51 56 4e 55 4c 30 6c 54 42 69 51 49 53 6c 78 64 47 6c 6c 54 58 56 64 6c 57 69 34 55 2f 68 59 58 47 42 6b 61 47 78 77 64 48 68 38 67 49 57 68 79 64 69 55 75 66 57 6c 37 4b 6e 52 77 68 53 35 4d 4d 45 46 4e 4d 33 31 35 6a 6a 64 55 4f 58 75 4e 6a 6d 6d 44 6a 56 74 42 69 34 65 63 55 46 46 51 53 4b 51 30 53 30 78 4e 54 6b 39 51 55 56 4a 54 56 46 56 57 56 31 68 5a 57 71 32 68 73 56 35 71 66 57 47 6f 74 62 4f 79 69 61 2b 70 75 34 32 36 73 4c 4b 52 73 4c 4f 35 74 36 35 38 74 73 6a 4a 73 38 Data Ascii: 5uhL9EL4SBhbC4MTMzeKyycrLzM3Oz9DR0tPULBgq2CUgNQkjLd/94S4pPvMzLTcxPzQI7djv8PHy8/T19vf4+fpSPlD+QVNUL0lTBiQISlxdGllTXVdlWi4U/hYXGBkaGxwdHh8gIWhydiUufWl7KnRwhS5MMEFNM315jjdUOXuNjmmDjVtBi4ecUFFQSKQ0S0xNTk9QUVJTVFVWV1hZWq2hsV5qfWGotbOyia+pu426sLKRsLO5t658tsjJs8
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 41 77 77 49 42 78 6e 52 78 67 73 52 44 52 38 6b 32 4d 33 56 4a 53 50 65 47 78 55 6a 47 69 4d 64 4b 2b 44 6a 39 73 62 64 33 74 2f 67 34 65 4c 6a 35 4f 58 6d 35 2b 6a 70 36 75 76 73 53 2f 72 76 41 67 4c 37 44 39 37 31 39 76 66 34 2b 66 72 37 2f 50 33 2b 41 41 46 4c 53 51 78 63 54 31 56 4d 57 47 45 5a 59 6a 4a 69 56 43 51 66 58 46 30 38 53 45 55 6e 49 43 42 70 61 32 78 73 63 48 4e 31 62 32 74 32 65 47 35 70 4e 47 74 34 65 48 39 31 65 34 4e 77 68 48 71 42 67 54 73 2b 50 7a 65 54 49 7a 6f 37 50 44 30 2b 50 30 42 42 51 6b 4e 45 52 55 5a 48 53 45 6d 68 6c 4a 71 52 6e 61 5a 65 70 4a 65 6e 69 4a 36 6a 6e 4b 65 75 72 6d 4f 69 73 71 79 69 74 4b 71 78 73 57 78 75 5a 73 4a 53 61 57 70 72 62 47 31 75 62 33 42 78 63 6e 4e 30 64 58 5a 33 65 48 6c 36 65 33 7a 55 78 38 33 Data Ascii: AwwIBxnRxgsRDR8k2M3VJSPeGxUjGiMdK+Dj9sbd3t/g4eLj5OXm5+jp6uvsS/rvAgL7D9719vf4+fr7/P3+AAFLSQxcT1VMWGEZYjJiVCQfXF08SEUnICBpa2xscHN1b2t2eG5pNGt4eH91e4NwhHqBgTs+PzeTIzo7PD0+P0BBQkNERUZHSEmhlJqRnaZepJeniJ6jnKeurmOisqyitKqxsWxuZsJSaWprbG1ub3BxcnN0dXZ3eHl6e3zUx83
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 4d 66 49 79 63 72 4c 7a 4d 33 4f 7a 39 44 52 30 74 50 55 31 64 62 58 32 4e 6e 61 4d 79 59 73 49 79 38 34 37 79 73 35 42 7a 76 2b 37 2f 45 46 31 4f 76 73 37 65 37 76 38 50 48 79 38 2f 54 31 39 76 66 34 2b 66 70 5a 43 66 30 51 45 42 45 53 44 42 2f 75 42 67 63 49 43 51 6f 4c 44 41 30 4f 44 78 41 52 62 31 68 67 61 46 74 79 41 68 6b 61 47 78 77 64 48 68 38 67 49 53 49 6a 4a 43 55 6d 4a 79 68 73 63 6d 36 41 68 57 6b 32 68 58 71 4a 61 55 59 38 63 7a 64 56 4f 55 35 57 4a 6a 30 2b 50 30 42 42 51 6b 4e 45 52 55 5a 48 53 45 6c 4b 53 30 79 51 6c 70 4b 6b 71 59 31 61 71 33 79 6f 6b 57 70 67 6c 32 4e 6c 52 31 35 66 59 47 46 69 59 32 52 6c 5a 6d 64 6f 61 63 64 56 62 47 31 75 62 33 42 78 63 6e 50 52 64 62 76 44 79 37 35 36 31 6d 5a 39 66 6e 2b 41 67 59 4b 44 68 49 57 47 Data Ascii: MfIycrLzM3Oz9DR0tPU1dbX2NnaMyYsIy847ys5Bzv+7/EF1Ovs7e7v8PHy8/T19vf4+fpZCf0QEBESDB/uBgcICQoLDA0ODxARb1hgaFtyAhkaGxwdHh8gISIjJCUmJyhscm6AhWk2hXqJaUY8czdVOU5WJj0+P0BBQkNERUZHSElKS0yQlpKkqY1aq3yokWpgl2NlR15fYGFiY2RlZmdoacdVbG1ub3BxcnPRdbvDy7561mZ9fn+AgYKDhIWG
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 37 5a 32 75 76 52 76 4e 50 55 31 64 59 58 48 43 41 61 48 79 55 71 48 69 4d 31 4f 68 34 6a 4b 43 77 6d 4b 7a 45 32 4b 69 39 42 52 76 77 58 48 45 55 2f 51 41 59 7a 39 68 58 34 56 65 54 37 2f 50 33 2b 41 41 45 43 41 7a 68 59 56 6a 73 5a 49 77 6f 53 4f 69 41 34 51 57 63 6d 58 53 5a 72 5a 7a 6f 37 5a 44 34 71 4f 43 4d 70 43 42 38 67 49 53 49 6a 4a 43 55 6d 66 31 4e 67 55 6a 39 47 4c 54 43 49 64 59 51 30 50 78 34 31 4e 6a 63 34 4f 54 6f 37 50 49 42 66 5a 6f 2b 54 56 6c 31 45 54 48 68 5a 57 32 79 54 66 31 78 67 66 58 78 37 61 4b 6d 6c 68 48 69 72 62 34 4f 4c 67 6f 2b 55 67 61 71 69 69 33 47 35 65 48 32 56 69 35 75 76 6b 59 79 63 69 59 72 4b 77 4c 47 49 67 71 53 58 76 62 71 6b 72 4a 36 2b 7a 72 2b 68 68 59 74 71 67 59 4b 44 68 49 57 47 68 34 6a 57 33 38 50 6a 70 Data Ascii: 7Z2uvRvNPU1dYXHCAaHyUqHiM1Oh4jKCwmKzE2Ki9BRvwXHEU/QAYz9hX4VeT7/P3+AAECAzhYVjsZIwoSOiA4QWcmXSZrZzo7ZD4qOCMpCB8gISIjJCUmf1NgUj9GLTCIdYQ0Px41Njc4OTo7PIBfZo+TVl1ETHhZW2yTf1xgfXx7aKmlhHirb4OLgo+Ugaqii3G5eH2Vi5uvkYyciYrKwLGIgqSXvbqkrJ6+zr+hhYtqgYKDhIWGh4jW38Pjp
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 69 4b 76 30 47 49 51 50 77 35 4e 77 35 79 4e 2f 67 34 65 4c 6a 35 4f 58 6d 4a 79 77 77 4b 69 38 31 4f 69 34 7a 52 55 6f 42 53 42 77 6b 50 79 45 50 43 45 39 42 54 30 74 49 54 6b 4a 57 53 41 77 4f 49 66 41 49 43 51 6f 4c 44 41 31 72 2b 42 41 52 45 68 4d 55 46 57 6c 63 5a 6c 31 4d 59 47 31 79 59 33 4a 30 4b 53 6b 79 5a 32 6c 30 4e 47 74 77 63 7a 70 76 64 57 39 37 66 48 61 41 65 6e 6c 43 68 6f 4e 35 6a 59 43 4b 6a 6f 70 4e 52 6b 75 58 54 55 71 4b 6b 5a 57 65 56 35 69 67 58 46 74 67 5a 47 46 69 61 6d 74 6d 5a 47 31 77 61 47 39 73 62 6d 39 76 62 6d 39 79 65 48 75 78 6f 6f 61 77 69 4c 57 32 73 38 47 78 6d 62 61 76 6c 71 69 62 67 36 53 42 7a 72 57 4e 6d 5a 43 76 6a 61 36 33 76 39 66 43 31 61 32 75 73 4a 4b 7a 6e 61 44 5a 78 4e 61 63 6e 4b 62 56 6f 36 65 6e 31 61 Data Ascii: iKv0GIQPw5Nw5yN/g4eLj5OXmJywwKi81Oi4zRUoBSBwkPyEPCE9BT0tITkJWSAwOIfAICQoLDA1r+BAREhMUFWlcZl1MYG1yY3J0KSkyZ2l0NGtwczpvdW97fHaAenlChoN5jYCKjopNRkuXTUqKkZWeV5igXFtgZGFiamtmZG1waG9sbm9vbm9yeHuxooawiLW2s8Gxmbavlqibg6SBzrWNmZCvja63v9fC1a2usJKznaDZxNacnKbVo6en1a
2024-12-17 10:51:16 UTC	1369	IN	Data Raw: 32 39 7a 64 33 74 2f 67 34 53 59 73 4d 53 6b 37 51 43 54 77 51 44 56 45 4a 41 48 32 4c 76 45 51 38 77 55 52 34 50 66 34 2b 66 72 37 2f 50 33 2b 41 41 45 43 41 31 74 4f 56 45 74 58 59 42 67 76 50 7a 64 6b 4a 78 41 75 45 68 6f 34 61 46 42 5a 4b 6c 4e 52 58 33 56 4a 54 55 52 32 56 46 4a 33 54 54 64 77 50 56 52 6a 64 33 68 7a 56 6d 4a 66 69 6c 5a 65 61 34 74 39 54 47 39 35 6a 30 31 39 63 34 46 57 54 46 46 59 56 56 64 59 57 46 68 64 58 31 39 58 58 46 70 67 58 47 42 65 59 6c 2b 69 61 58 61 73 61 32 36 73 70 48 47 6c 70 5a 53 76 75 4b 69 6e 6c 33 4b 51 69 4b 6c 36 67 4c 68 37 77 4b 36 76 77 36 48 4c 77 6f 75 59 6f 71 44 4b 6e 72 48 55 78 73 6d 4c 70 62 4f 53 74 70 57 6f 30 61 32 61 74 39 79 76 6f 2b 4b 33 77 74 36 34 35 65 75 39 74 61 72 4d 72 36 6a 41 34 63 76 Data Ascii: 29zd3t/g4SYsMSk7QCTwQDVEJAH2LvEQ8wUR4Pf4+fr7/P3+AAECA1tOVEtXYBgvPzdkJxAuEho4aFBZKlNRX3VJTUR2VFJ3TTdwPVRjd3hzVmJfilZea4t9TG95j019c4FWTFFYVVdYWFhdX19XXFpgXGBeYl+iaXasa26spHGlpZSvuKinl3KQiKl6gLh7wK6vw6HLwouYoqDKnrHUxsmLpbOStpWo0a2at9yvo+K3wt645eu9tarMr6jA4cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49715	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:16 UTC	872	OUT	GET /favicon.ico HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:16 UTC	874	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 17 Dec 2024 10:51:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.1 Location: / Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1157 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kqVs63Wm9%2FDS%2Fyae1R9yO4WB7Bx5XPtOwGXtJrUfuVUQ0YWgyk9r2O6LXvIKYiR5ENqvouuYX1IFkZUar%2B9Ix9lW5YcOtvRzGKkT89fNog18LvsB7t%2B5iFD9sQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365b65efe37d02-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=2001&rtt_var=754&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1450&delivery_rate=1448412&cwnd=230&unsent_bytes=0&cid=7a1fd6d94135a982&ts=453&x=0"
2024-12-17 10:51:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49716	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:16 UTC	407	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8f365b3ddae142a1 HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:17 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 105421 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bHOREY4PRe0l59oPCsA0GkKDkjOCwjfnHsmrNUb1Sqq9tJQOigNHqRkrSxvdoNLItEzMzfE8fGJhQj8wdHmpd6omwfFM09gN0jEfSomf8Ig2Ol95rNxSPW%2Fig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365b668a770cb8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1467&min_rtt=1464&rtt_var=556&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=985&delivery_rate=1957104&cwnd=171&unsent_bytes=0&cid=fad0d21dc843b540&ts=445&x=0"
2024-12-17 10:51:17 UTC	510	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 70 6f 72 74 65 64 25 32 30 61 6e 64 25 32 30 63 61 6e 6e 6f 74 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 53 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 33 46 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 70 61 67 65 5f 74 69 74 6c 65 22 3a 22 4a 75 73 74 25 32 30 61 25 32 30 6d 6f 6d 65 6e 74 2e 2e 2e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 5f 6f 76 65 72 72 75 6e 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c Data Ascii: ported%20and%20cannot%20complete%20verification","stuck_helper_title":"Stuck%20on%20this%20page%3F","human_button_text":"Verify%20you%20are%20human","page_title":"Just%20a%20moment...","redirecting_text_overrun":"%25%7Bplaceholder.com%7D%20is%20taking%20l
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 67 65 25 32 43 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 66 6c 61 67 67 65 64 25 32 30 61 73 25 32 30 61 25 32 30 62 6f 74 2e 25 32 30 54 72 79 25 32 30 72 65 73 65 74 74 69 6e 67 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 69 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 25 32 38 65 2e 67 2e 25 32 30 72 6f 75 74 65 72 25 32 39 2e 25 32 30 46 6f 72 25 32 30 61 64 64 69 74 69 6f 6e 61 6c 25 32 30 61 73 73 69 73 74 61 6e 63 65 25 32 43 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 6f 77 6e 65 72 73 2e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 22 3a 22 57 Data Ascii: ge%2C%20your%20device%20or%20connection%20has%20been%20flagged%20as%20a%20bot.%20Try%20resetting%20your%20device%20or%20internet%20connection%20%28e.g.%20router%29.%20For%20additional%20assistance%2C%20contact%20the%20site%20owners.","redirecting_text":"W
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 50 6c 65 61 73 65 25 32 30 65 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 32 43 25 32 30 74 68 65 6e 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 22 3a 22 45 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 Data Ascii: are%20human%20before%20proceeding.%20Please%20enable%20JavaScript%20and%20cookies%2C%20then%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E.","turnstile_timeout":"Timed%20out","js_cookies_missing":"Enable%20JavaScript%20and%20cookies%
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 52 2c 65 53 2c 66 69 2c 66 6a 2c 66 6b 2c 66 Data Ascii: polyfills":{"turnstile_timeout":false,"turnstile_overrun_description":false,"turnstile_feedback_description":false,"feedback_report_output_subtitle":false,"testing_only_always_pass":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eO,eR,eS,fi,fj,fk,f
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 41 72 4b 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 54 4f 76 74 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 74 58 72 59 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 6a 47 6f 6f 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 6c 5a 44 56 4a 27 3a 68 63 28 38 35 37 29 2c 27 41 64 73 70 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 49 55 7a 59 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 75 59 75 78 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: {return h(i)},'VArKU':function(h,i){return i&h},'TOvtQ':function(h,i){return i==h},'tXrYn':function(h,i){return h+i},'jGooK':function(h,i){return h===i},'lZDVJ':hc(857),'Adspm':function(h,i){return h<i},'IUzYh':function(h,i){return i\|h},'uYuxK':function(h
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 2c 68 64 29 7b 72 65 74 75 72 6e 20 68 64 3d 62 2c 64 5b 68 64 28 31 32 38 38 29 5d 5b 68 64 28 36 33 33 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 65 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 68 65 3d 68 63 2c 64 5b 68 65 28 37 31 32 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 68 65 28 31 32 39 34 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 68 65 28 36 33 33 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 68 65 28 31 33 34 31 29 5d 5b 68 65 28 35 37 36 29 5d 5b 68 Data Ascii: function(i,hd){return hd=b,d[hd(1288)][hd(633)](i)})},'g':function(i,j,o,he,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(he=hc,d[he(712)](null,i))return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[he(1294)];J+=1)if(K=i[he(633)](J),Object[he(1341)][he(576)][h
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 3f 28 65 34 3d 30 2c 65 35 5b 68 65 28 36 32 30 29 5d 28 65 36 28 65 37 29 29 2c 65 38 3d 30 29 3a 65 39 2b 2b 2c 65 61 3e 3e 3d 31 2c 64 59 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 65 62 3d 31 2c 65 63 3d 30 3b 64 5b 68 65 28 35 33 38 29 5d 28 65 64 2c 65 65 29 3b 65 67 3d 65 68 3c 3c 31 2e 38 7c 65 69 2c 65 6a 3d 3d 64 5b 68 65 28 37 32 33 29 5d 28 65 6b 2c 31 29 3f 28 65 6c 3d 30 2c 65 6d 5b 68 65 28 36 32 30 29 5d 28 64 5b 68 65 28 31 33 31 31 29 5d 28 65 6e 2c 65 6f 29 29 2c 65 70 3d 30 29 3a 65 71 2b 2b 2c 65 72 3d 30 2c 65 66 2b 2b 29 3b 66 6f 72 28 65 73 3d 65 74 5b 68 65 28 32 36 39 29 5d 28 30 29 2c 65 75 3d 30 3b 31 36 3e 65 76 3b 65 78 3d 65 79 3c 3c 31 2e 34 39 7c 64 5b 68 65 28 31 30 37 32 29 5d 28 65 7a 2c 31 29 2c 65 42 2d 31 3d 3d 65 41 Data Ascii: ?(e4=0,e5[he(620)](e6(e7)),e8=0):e9++,ea>>=1,dY++);}else{for(eb=1,ec=0;d[he(538)](ed,ee);eg=eh<<1.8\|ei,ej==d[he(723)](ek,1)?(el=0,em[he(620)](d[he(1311)](en,eo)),ep=0):eq++,er=0,ef++);for(es=et[he(269)](0),eu=0;16>ev;ex=ey<<1.49\|d[he(1072)](ez,1),eB-1==eA
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 68 65 28 31 30 35 38 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 66 29 7b 72 65 74 75 72 6e 20 68 66 3d 68 63 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 68 66 28 31 32 39 34 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 67 29 7b 72 65 74 75 72 6e 20 68 67 3d 68 66 2c 68 5b 68 67 28 32 36 39 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 68 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 68 68 3d 68 63 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d Data Ascii: o(H));break}else I++;return G[he(1058)]('')},'j':function(h,hf){return hf=hc,null==h?'':''==h?null:f.i(h[hf(1294)],32768,function(i,hg){return hg=hf,h[hg(269)](i)})},'i':function(i,j,o,hh,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N){for(hh=hc,s=[],x=4,B=4,C=3,D=[],G=
2024-12-17 10:51:17 UTC	1369	IN	Data Raw: 4a 29 2c 4f 3d 64 5b 68 68 28 31 32 30 36 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 68 28 31 30 35 38 29 5d 28 27 27 29 7d 69 66 28 64 5b 68 68 28 31 33 34 39 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 68 68 28 37 31 31 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 64 5b 68 68 28 36 34 37 29 5d 28 4f 2c 42 29 29 4f 3d 45 2b 45 5b 68 68 28 36 33 33 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 68 68 28 36 32 30 29 5d 28 4f 29 2c 73 5b 42 2b 2b 5d 3d 45 2b 4f 5b 68 68 28 36 33 33 29 5d 28 30 29 2c 78 2d 2d 2c 45 3d 4f 2c 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 68 68 28 37 31 31 29 5d 28 32 2c 43 29 2c 43 Data Ascii: J),O=d[hh(1206)](B,1),x--;break;case 2:return D[hh(1058)]('')}if(d[hh(1349)](0,x)&&(x=Math[hh(711)](2,C),C++),s[O])O=s[O];else if(d[hh(647)](O,B))O=E+E[hh(633)](0);else return null;D[hh(620)](O),s[B++]=E+O[hh(633)](0),x--,E=O,0==x&&(x=Math[hh(711)](2,C),C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49717	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:17 UTC	413	OUT	GET /turnstile/v0/g/f9063374b04d/api.js?onload=fjGVd3&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:18 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f365b6d29fb4282-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:18 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49720	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:18 UTC	761	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:18 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26656 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-17 10:51:18 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 33 36 35 62 37 30 61 63 30 30 34 31 61 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f365b70ac0041af-EWRalt-svc: h3=":443"; ma=86400
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 68 31 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 Data Ascii: nt-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased;font-style:normal}h1{color:#232323;font-size:16px;font-weight:700;line-hei
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 33 38 31 32 37 7d 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: rray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#038127}#expired-text,#overrun-text,#timeout-text{font-size:14px;font-weight:
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d Data Ascii: k #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-overlay a:active,.theme-dark #challenge-overlay a:focus,.theme-
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 Data Ascii: dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-link:hover{color:#949494}.theme-dark #expired-refresh-link,.theme
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 7d 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 20 2e 31 73 Data Ascii: ll:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#fff;stroke:#fff}}.failure-cross{animation:fade-in.animation .1s
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c Data Ascii: ent:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{height:25px;margin-bottom:0}.size-compact #branding{align-self:fl
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 20 30 20 30 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 7b Data Ascii: :0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justify-content:flex-end;margin:0 12px 0 0}.rtl.size-compact #terms{
2024-12-17 10:51:18 UTC	1369	IN	Data Raw: 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 30 2c 31 30 30 2c 30 3b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: nge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-linecap:round;stroke:#038127;stroke-dasharray:0,100,0;stroke-das

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49722	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:19 UTC	581	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:19 UTC	914	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 10:51:19 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 39+RyecSQpEeC8spLVLNdFdcpAVH0WGuvUY=$B5B4WhvvlIwFzbXi Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X22CMFHQdv9TCYZ70mjog4xyvcxf77z930fgKSwPeYDRtCO8G0JmmpCS7YTIF%2Bh%2BWxVJPviqz%2BJmIbUb1w%2FWZAgO2y1YvphoqZd4sKOUJ9KxP5ExDfYWh6QqMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365b773ac9de99-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1468&rtt_var=564&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1159&delivery_rate=1918528&cwnd=186&unsent_bytes=0&cid=3075686db0d38a88&ts=445&x=0"
2024-12-17 10:51:19 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49723	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:19 UTC	861	OUT	GET / HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:19 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:19 UTC	911	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 78 65 65 77 6c 49 34 77 39 6a 4d 6d 76 64 31 44 2f 43 69 53 49 6d 41 30 7a 57 66 4f 2b 46 43 58 4b 36 71 30 51 48 7a 76 74 31 4d 37 45 72 4c 73 47 6f 4b 52 46 51 58 53 51 4d 61 51 77 37 76 4c 4f 5a 32 4a 74 47 7a 4d 44 75 75 49 4b 32 46 6d 58 72 39 59 45 72 78 55 41 47 66 78 52 4e 77 70 6a 51 46 38 41 74 6f 4c 4f 37 45 3d 24 38 70 64 51 31 48 4a 7a 76 53 75 66 37 36 6e 64 50 61 51 75 78 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: xeewlI4w9jMmvd1D/CiSImA0zWfO+FCXK6q0QHzvt1M7ErLsGoKRFQXSQMaQw7vLOZ2JtGzMDuuIK2FmXr9YErxUAGfxRNwpjQF8AtoLO7E=$8pdQ1HJzvSuf76ndPaQuxg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:19 UTC	1369	IN	Data Raw: 32 33 33 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2330<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:19 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:19 UTC	1369	IN	Data Raw: 4b 66 47 55 41 33 59 52 7a 66 4d 58 30 4f 50 2e 53 48 47 52 73 38 4c 69 53 59 54 75 4c 41 63 6f 4c 50 66 69 35 54 35 44 55 38 45 71 33 37 7a 51 67 55 4e 64 6e 39 31 68 56 32 75 4b 4c 66 6b 54 6d 43 54 52 59 53 41 36 4f 33 6d 41 6f 51 4d 75 58 43 61 74 70 57 62 5a 62 77 4b 6b 41 5f 47 5f 62 6b 6e 41 77 63 6f 58 56 59 69 69 6b 71 62 6b 4c 6e 61 47 52 4d 65 62 51 79 56 5a 57 64 7a 58 69 55 30 41 74 4b 78 5f 51 5f 33 6a 32 44 76 57 73 5a 64 72 42 5a 36 77 72 79 43 75 66 55 4c 31 37 66 67 77 45 72 6a 56 49 51 51 30 7a 6c 41 51 59 5a 77 68 41 79 48 6e 70 51 51 68 30 59 75 6b 70 70 74 42 50 63 38 78 75 34 5a 61 31 30 61 66 5f 39 46 44 64 52 76 7a 44 6e 72 34 6c 4f 74 70 5a 63 75 36 61 37 5a 61 64 4e 38 48 32 6c 38 34 76 75 66 5f 61 44 78 6a 7a 43 5f 6a 6c 64 70 Data Ascii: KfGUA3YRzfMX0OP.SHGRs8LiSYTuLAcoLPfi5T5DU8Eq37zQgUNdn91hV2uKLfkTmCTRYSA6O3mAoQMuXCatpWbZbwKkA_G_bknAwcoXVYiikqbkLnaGRMebQyVZWdzXiU0AtKx_Q_3j2DvWsZdrBZ6wryCufUL17fgwErjVIQQ0zlAQYZwhAyHnpQQh0YukpptBPc8xu4Za10af_9FDdRvzDnr4lOtpZcu6a7ZadN8H2l84vuf_aDxjzC_jldp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49724	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:19 UTC	728	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f365b70ac0041af&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:20 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119691 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f365b7b2ac243ad-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b Data Ascii: 0Site%20Administrator%20if%20this%20problem%20persists.","turnstile_overrun_description":"Stuck%20here%3F","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 65 5a 2c 66 30 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 35 30 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 37 31 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 36 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 39 32 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 37 32 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 39 35 30 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 38 29 29 2f 37 2a 28 2d 70 61 72 73 65 Data Ascii: fY,ga,gg,gh,gi,gs,gD,gH,eZ,f0){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1050))/1+-parseInt(gI(1771))/2(-parseInt(gI(1156))/3)+-parseInt(gI(1092))/4+-parseInt(gI(1872))/5(-parseInt(gI(1950))/6)+-parseInt(gI(1418))/7*(-parse
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 29 2c 27 75 6a 7a 49 68 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 68 41 49 6f 69 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 6e 75 6c 6c 3d 3d 3d 68 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 68 32 28 31 35 33 34 29 5d 28 65 57 2c 68 29 2c 67 5b 68 32 28 38 32 35 29 5d 5b 68 32 28 31 37 32 34 29 5d 26 26 28 78 3d 78 5b 68 32 28 35 33 39 29 5d 28 67 5b 68 32 28 38 32 35 29 5d 5b 68 32 28 31 37 32 34 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 32 28 31 39 35 39 29 5d 5b 68 32 28 31 39 34 38 29 5d 26 26 67 5b 68 32 28 31 39 34 33 29 5d 3f 67 5b 68 32 28 31 39 35 39 29 5d 5b 68 32 28 31 39 34 38 29 5d 28 6e 65 77 20 Data Ascii: ),'ujzIh':function(G,H,I){return G(H,I)},'hAIoi':function(G,H){return G+H}},null===h\|\|h===void 0)return j;for(x=o[h2(1534)](eW,h),g[h2(825)][h2(1724)]&&(x=x[h2(539)](g[h2(825)][h2(1724)](h))),x=g[h2(1959)][h2(1948)]&&g[h2(1943)]?g[h2(1959)][h2(1948)](new
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 35 31 34 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 58 28 31 35 31 34 29 5d 3d 21 21 5b 5d 7d 2c 66 79 3d 30 2c 65 4e 5b 67 4a 28 31 33 39 36 29 5d 3d 3d 3d 67 4a 28 31 36 39 33 29 3f 65 4e 5b 67 4a 28 31 34 39 38 29 5d 28 67 4a 28 37 33 35 29 2c 66 75 6e 63 74 69 6f 6e 28 69 38 2c 63 29 7b 69 38 3d 67 4a 2c 63 3d 7b 27 6e 70 6e 48 74 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 69 38 28 38 35 34 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 42 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 42 2c 30 29 2c 66 43 3d 66 75 6e 63 74 69 6f 6e 28 69 39 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 39 3d 67 4a 2c 64 3d 7b 27 4e 43 7a 63 42 27 3a 69 39 28 31 32 36 39 29 2c 27 52 4c 46 73 Data Ascii: 514)])return;eM[hX(1514)]=!![]},fy=0,eN[gJ(1396)]===gJ(1693)?eN[gJ(1498)](gJ(735),function(i8,c){i8=gJ,c={'npnHt':function(d,e,f){return d(e,f)}},c[i8(854)](setTimeout,fB,0)}):setTimeout(fB,0),fC=function(i9,d,e,f,g){return i9=gJ,d={'NCzcB':i9(1269),'RLFs
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 6a 54 78 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 48 57 6d 47 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 49 77 52 66 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 39 28 31 32 33 31 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 61 2c 69 29 7b 72 65 74 75 72 6e 20 69 61 3d 69 39 2c 69 3d 7b 27 45 66 6c 6b 56 27 3a 64 5b 69 61 28 31 33 32 39 29 5d 2c 27 4d 4e 53 42 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 29 7b 72 65 74 75 72 6e 20 6a 3c 6b 7d 2c 27 4e 74 73 6d 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 29 7b 72 65 74 75 72 6e 20 6a 3d 3d 6b 7d 2c 27 62 72 63 4b 63 Data Ascii: jTxa':function(h,i){return i&h},'HWmGx':function(h,i){return h&i},'IwRfu':function(h,i){return h*i}},e=String[i9(1231)],f={'h':function(h,ia,i){return ia=i9,i={'EflkV':d[ia(1329)],'MNSBo':function(j,k){return j<k},'Ntsmz':function(j,k){return j==k},'brcKc
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 28 31 34 33 32 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 69 64 28 31 36 35 34 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 64 28 39 36 36 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 69 64 28 31 31 31 39 29 5d 28 49 2c 31 29 7c 64 5b 69 64 28 38 31 38 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 64 28 31 36 35 34 29 5d 28 64 5b 69 64 28 31 36 38 36 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 73 5b 69 64 28 35 31 34 29 5d 28 4e 29 5b 69 64 28 36 33 33 29 5d 5b 69 64 28 36 33 35 29 5d 3d 69 64 28 31 30 37 37 29 3b 45 2d 2d 2c 64 5b 69 64 28 36 30 36 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 Data Ascii: (1432)](J,j-1)?(J=0,H[id(1654)](o(I)),I=0):J++,N=0,x++);for(N=D[id(966)](0),x=0;16>x;I=d[id(1119)](I,1)\|d[id(818)](N,1),J==j-1?(J=0,H[id(1654)](d[id(1686)](o,I)),I=0):J++,N>>=1,x++);}else s[id(514)](N)[id(633)][id(635)]=id(1077);E--,d[id(606)](0,E)&&(E=Ma
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 31 2e 33 35 26 4e 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 64 28 31 36 35 34 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 6a 2d 31 3d 3d 4a 29 7b 48 5b 69 64 28 31 36 35 34 29 5d 28 64 5b 69 64 28 31 36 38 36 29 5d 28 6f 2c 49 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4a 2b 2b 3b 72 65 74 75 72 6e 20 48 5b 69 64 28 36 38 35 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 65 2c 69 2c 6a 2c 6c 2c 6d 29 7b 69 66 28 69 65 3d 69 39 2c 69 3d 7b 7d 2c 69 5b 69 65 28 31 34 31 35 29 5d 3d 69 65 28 39 39 33 29 2c 69 5b 69 65 28 31 36 35 32 29 5d 3d 69 65 28 31 39 31 39 29 2c 6a 3d 69 2c 64 5b 69 65 28 39 38 34 29 5d 28 69 65 28 39 35 35 29 2c 69 Data Ascii: 1.35&N,J==j-1?(J=0,H[id(1654)](o(I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,j-1==J){H[id(1654)](d[id(1686)](o,I));break}else J++;return H[id(685)]('')},'j':function(h,ie,i,j,l,m){if(ie=i9,i={},i[ie(1415)]=ie(993),i[ie(1652)]=ie(1919),j=i,d[ie(984)](ie(955),i
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 3d 30 2c 4b 3d 4d 61 74 68 5b 69 69 28 38 30 30 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 69 69 28 39 31 34 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 69 28 38 30 30 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 64 5b 69 69 28 31 33 35 33 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 69 28 31 32 39 38 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 69 69 28 31 35 36 32 29 5d 28 65 2c 4a 29 Data Ascii: =0,K=Math[ii(800)](2,8),F=1;K!=F;N=H&G,H>>=1,H==0&&(H=j,G=o(I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[ii(914)](e,J);break;case 1:for(J=0,K=Math[ii(800)](2,16),F=1;K!=F;N=d[ii(1353)](G,H),H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[ii(1298)](0<N?1:0,F),F<<=1);O=d[ii(1562)](e,J)
2024-12-17 10:51:20 UTC	1369	IN	Data Raw: 27 3a 69 6b 28 39 39 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 6b 28 31 39 34 34 29 5d 5b 69 6b 28 36 39 33 29 5d 2c 27 65 76 65 6e 74 27 3a 69 6b 28 31 38 34 34 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 6b 28 31 39 34 34 29 5d 5b 69 6b 28 38 31 35 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 6b 28 31 39 34 34 29 5d 5b 69 6b 28 31 31 36 32 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 69 6b 28 31 37 34 38 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 69 6b 28 31 39 34 34 29 5d 5b 69 6b 28 34 38 36 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 32 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 6c 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 69 6c 3d 67 4a 2c 7b 27 77 Data Ascii: ':ik(993),'widgetId':eM[ik(1944)][ik(693)],'event':ik(1844),'cfChlOut':eM[ik(1944)][ik(815)],'cfChlOutS':eM[ik(1944)][ik(1162)],'code':e[ik(1748)],'rcV':eM[ik(1944)][ik(486)]},'*'))},g)},eM[gJ(1261)]=function(f,g,h,il,i,j,k,l,m,n,o,s,x,B,C,D){i=(il=gJ,{'w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49725	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:20 UTC	740	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:20 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f365b7c7dc04314-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49727	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:21 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:22 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:22 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f365b86e9880f3f-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:22 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:22 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f365b70ac0041af&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:22 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114121 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f365b898b040f3a-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:22 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 Data Ascii: lass%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_footer_privacy":"Privacy","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_refres
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 67 39 2c 67 66 2c 67 67 2c 67 68 2c 67 72 2c 67 43 2c 67 47 2c 67 48 2c 66 39 2c 66 61 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 36 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 34 31 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 36 36 36 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 38 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 36 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 38 30 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: g9,gf,gg,gh,gr,gC,gG,gH,f9,fa){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(456))/1+-parseInt(gI(441))/2(parseInt(gI(666))/3)+parseInt(gI(908))/4(-parseInt(gI(1416))/5)+-parseInt(gI(1580))/6+-parseInt(gI(1177))/7+parseInt(gI(
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 6b 76 73 75 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 59 61 65 43 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 52 6d 41 69 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4c 4d 54 65 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 42 71 4b 59 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6b 66 74 78 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4b 28 39 31 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 Data Ascii: tion(h,i){return h&i},'kvsuY':function(h,i){return h==i},'YaeCk':function(h,i){return h(i)},'RmAiD':function(h,i){return h<i},'LMTei':function(h,i){return h*i},'BqKYU':function(h,i){return h<i},'kftxk':function(h,i){return h-i}},e=String[gK(916)],f={'h':f
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 67 4e 28 31 30 31 31 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 43 3d 64 5b 67 4e 28 31 32 35 35 29 5d 28 53 74 72 69 6e 67 2c 4b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 44 2d 2d 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 69 66 28 64 5b 67 4e 28 36 39 35 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4e 28 31 37 33 32 29 5d 5b 67 4e 28 34 38 32 29 5d 5b 67 4e 28 31 36 35 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 4e 28 33 36 34 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d Data Ascii: O>>=1,s++);continue;case'2':D==0&&(D=Math[gN(1011)](2,F),F++);continue;case'3':C=d[gN(1255)](String,K);continue;case'4':D--;continue}break}if(d[gN(695)]('',C)){if(Object[gN(1732)][gN(482)][gN(1654)](B,C)){if(256>C[gN(364)](0)){for(s=0;s<F;H<<=1,j-1==I?(I=
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 67 51 28 31 32 33 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 31 30 31 31 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 67 51 28 31 33 35 36 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 51 28 31 32 35 35 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 51 28 31 36 36 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 67 51 28 31 32 35 35 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 31 30 31 Data Ascii: 0,H)&&(H=j,G=o(I++)),J\|=(d[gQ(1234)](0,L)?1:0)*F,F<<=1);switch(J){case 0:for(J=0,K=Math[gQ(1011)](2,8),F=1;F!=K;L=G&H,H>>=1,d[gQ(1356)](0,H)&&(H=j,G=d[gQ(1255)](o,I++)),J\|=d[gQ(1667)](0<L?1:0,F),F<<=1);M=d[gQ(1255)](e,J);break;case 1:for(J=0,K=Math[gQ(101
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 69 64 20 67 5b 68 31 28 31 32 39 38 29 5d 28 29 3a 65 5b 68 31 28 31 31 32 39 29 5d 28 65 50 2c 65 5b 68 31 28 31 32 31 33 29 5d 28 65 51 2c 63 29 29 7d 7d 2c 65 4d 5b 67 4a 28 31 32 37 36 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4a 28 31 32 34 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 6a 29 7b 69 66 28 68 6a 3d 67 4a 2c 65 4d 5b 68 6a 28 31 32 37 36 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 6a 28 31 32 37 36 29 5d 3d 21 21 5b 5d 7d 2c 65 59 3d 30 2c 65 4e 5b 67 4a 28 31 37 30 36 29 5d 3d 3d 3d 67 4a 28 39 38 39 29 3f 65 4e 5b 67 4a 28 31 30 37 36 29 5d 28 67 4a 28 31 30 35 34 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 31 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 31 2c 30 29 2c 66 32 3d 7b 7d 2c 66 32 5b 67 4a 28 36 39 Data Ascii: id g[h1(1298)]():e[h1(1129)](eP,e[h1(1213)](eQ,c))}},eM[gJ(1276)]=![],eM[gJ(1241)]=function(hj){if(hj=gJ,eM[hj(1276)])return;eM[hj(1276)]=!![]},eY=0,eN[gJ(1706)]===gJ(989)?eN[gJ(1076)](gJ(1054),function(){setTimeout(f1,0)}):setTimeout(f1,0),f2={},f2[gJ(69
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 2c 69 2c 68 7a 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 68 7a 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 7a 28 31 35 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 68 7a 28 31 36 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 7d 2c 6a 5b 68 7a 28 31 37 33 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 68 7a 28 31 30 37 31 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 68 7a 28 31 37 30 30 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 27 66 27 3d 3d 3d 6e 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 68 7a 28 31 35 37 Data Ascii: nction(h,i,hz,j,k,l,m,n,o){for(hz=gJ,j={},j[hz(1578)]=function(s,v){return s<v},j[hz(1606)]=function(s,v){return s===v},j[hz(1735)]=function(s,v){return s+v},k=j,l=Object[hz(1071)](i),m=0;m<l[hz(1700)];m++)if(n=l[m],'f'===n&&(n='N'),h[n]){for(o=0;k[hz(157
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 36 28 31 35 39 30 29 5d 29 2c 69 5b 69 36 28 38 34 34 29 5d 28 66 5b 69 36 28 31 30 32 30 29 5d 2c 45 72 72 6f 72 29 3f 69 5b 69 36 28 31 34 35 34 29 5d 3d 3d 3d 69 36 28 31 30 34 33 29 3f 65 28 69 5b 69 36 28 31 30 36 39 29 5d 28 66 2c 31 29 29 3a 66 5b 69 36 28 31 30 32 30 29 5d 3d 4a 53 4f 4e 5b 69 36 28 31 30 39 32 29 5d 28 66 5b 69 36 28 31 30 32 30 29 5d 2c 4f 62 6a 65 63 74 5b 69 36 28 31 36 38 39 29 5d 28 66 5b 69 36 28 31 30 32 30 29 5d 29 29 3a 66 5b 69 36 28 31 30 32 30 29 5d 3d 4a 53 4f 4e 5b 69 36 28 31 30 39 32 29 5d 28 66 5b 69 36 28 31 30 32 30 29 5d 29 2c 6b 3d 69 5b 69 36 28 31 32 33 32 29 5d 28 68 2c 69 36 28 31 34 38 30 29 29 2c 6c 3d 65 4d 5b 69 36 28 31 34 33 32 29 5d 5b 69 36 28 31 36 37 35 29 5d 3f 69 5b 69 36 28 31 30 36 39 29 5d Data Ascii: 6(1590)]),i[i6(844)](f[i6(1020)],Error)?i[i6(1454)]===i6(1043)?e(i[i6(1069)](f,1)):f[i6(1020)]=JSON[i6(1092)](f[i6(1020)],Object[i6(1689)](f[i6(1020)])):f[i6(1020)]=JSON[i6(1092)](f[i6(1020)]),k=i[i6(1232)](h,i6(1480)),l=eM[i6(1432)][i6(1675)]?i[i6(1069)]
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 29 29 3a 28 69 3d 6e 5b 31 5d 2c 6a 3d 70 61 72 73 65 49 6e 74 28 6e 5b 32 5d 2c 31 30 29 2c 6b 3d 70 61 72 73 65 49 6e 74 28 6e 5b 33 5d 2c 31 30 29 29 29 29 29 3a 68 3d 4a 53 4f 4e 5b 69 37 28 31 30 39 32 29 5d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 6f 5b 69 37 28 38 32 33 29 5d 3d 68 2c 6f 5b 69 37 28 31 35 39 30 29 5d 3d 69 2c 6f 5b 69 37 28 31 35 33 33 29 5d 3d 6a 2c 6f 5b 69 37 28 31 36 39 32 29 5d 3d 6b 2c 6f 5b 69 37 28 31 30 32 30 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4a 28 31 33 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 69 39 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 69 66 28 69 39 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 39 28 36 33 35 29 5d 3d 69 39 28 37 32 36 29 2c 6a 5b 69 39 28 38 37 38 29 5d 3d 69 39 28 31 Data Ascii: )):(i=n[1],j=parseInt(n[2],10),k=parseInt(n[3],10))))):h=JSON[i7(1092)](e);return o={},o[i7(823)]=h,o[i7(1590)]=i,o[i7(1533)]=j,o[i7(1692)]=k,o[i7(1020)]=e,o},eM[gJ(1328)]=function(e,f,g,h,i,i9,j,k,l,m,n,o){if(i9=gJ,j={},j[i9(635)]=i9(726),j[i9(878)]=i9(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49731	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:22 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4020 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:22 UTC	4020	OUT	Data Raw: 76 5f 38 66 33 36 35 62 37 30 61 63 30 30 34 31 61 66 3d 55 35 73 58 37 58 61 58 78 58 59 58 6f 58 50 38 65 7a 38 65 48 49 58 75 5a 67 68 4f 6a 5a 4a 2d 46 65 63 6c 65 37 57 58 6d 4c 65 41 58 4f 35 65 53 65 43 4a 6c 65 6a 4b 39 58 37 6c 65 42 58 6a 33 79 48 65 45 4a 58 65 6a 59 75 65 61 44 48 65 4f 57 6d 44 68 6c 4e 58 39 65 69 55 65 61 31 39 4c 57 57 6d 48 65 50 7a 55 39 6c 45 49 35 33 46 42 6d 30 41 38 2d 68 65 55 65 73 68 6d 62 66 51 52 78 33 41 46 6c 4d 79 72 66 65 61 53 5a 57 6c 64 76 45 4f 52 6d 73 65 53 44 33 4a 6c 58 6d 79 4c 71 74 44 70 73 73 73 32 63 70 44 45 7a 73 73 67 38 4b 42 36 6d 73 65 45 58 39 58 45 59 6d 68 65 53 79 44 4f 73 5a 65 5a 71 52 47 48 57 65 6f 48 57 6d 6f 4e 50 43 79 73 58 6d 78 46 37 35 6c 43 62 48 65 6e 58 4a 70 61 50 6f 37 Data Ascii: v_8f365b70ac0041af=U5sX7XaXxXYXoXP8ez8eHIXuZghOjZJ-Fecle7WXmLeAXO5eSeCJlejK9X7leBXj3yHeEJXejYueaDHeOWmDhlNX9eiUea19LWWmHePzU9lEI53FBm0A8-heUeshmbfQRx3AFlMyrfeaSZWldvEORmseSD3JlXmyLqtDpsss2cpDEzssg8KB6mseEX9XEYmheSyDOsZeZqRGHWeoHWmoNPCysXmxF75lCbHenXJpaPo7
2024-12-17 10:51:22 UTC	714	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:22 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 80576 Connection: close cf-chl-gen: +/RI32EnWHoaPrPtY+p69c5UUYEvsPaoBYccD69UdSX7moK6NdWs2wQ2NIcAGMXEZ+78IZnECzmGxZa6BNGthYbSOjP0SCOK8S7RHXJeqg/s+QoJ+Ke7otbrzDn/372kn+I2uSZ1uto1HgkPwOXsQpJ8jq/Pq8Dsecyc7MNJryVvew5oNQg+paE9QE+vKOZW/iVOdTRuHkAkaDH8C90eFAKOCQ3DMGsdg/jEtmxRhh5Y/4dssmhKkoVl4KPWJ8IWlJVsiVWzOBEId/7gK1I2Y+L2Zn8KjBGKb/JHHtfqUezhjPOgshCa4eNmyFY6rREJCQcLmU0+yPp/VmpJCTQ5omt7spWV9FY1gup/YLXE7eggr5Qq+phObimONah9hJCouLz//PXHIH+rlVxFbRHHz7wz9VXuTpU9O1zfaTzJuxzERcbHGk+BdOKAVBq+k3oNUnB7q9uuzMWhI54l$Kw0i7Gi212ECD/qi Server: cloudflare CF-RAY: 8f365b899c88efa7-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:22 UTC	655	IN	Data Raw: 75 36 36 30 71 37 66 41 65 4b 71 4a 73 38 4f 39 73 38 57 37 77 73 4a 39 66 39 4c 56 6c 48 72 53 78 63 76 43 7a 74 65 50 77 62 36 55 77 71 4f 4f 79 5a 43 6c 69 2b 50 57 33 4e 50 66 36 4b 44 53 7a 36 62 54 74 4a 2f 62 6f 62 61 63 6e 5a 36 66 39 75 4c 30 6f 2b 50 6f 37 4f 62 72 38 66 62 71 37 77 49 48 72 38 32 78 38 77 62 37 43 77 54 38 42 77 34 4f 39 73 7a 36 32 61 6e 41 77 63 4c 44 47 77 63 5a 78 78 77 50 47 52 44 2b 45 79 41 6c 46 69 55 6e 30 2f 48 56 47 43 6f 67 4c 79 67 68 4b 7a 49 79 47 2f 45 66 2f 63 33 4f 35 65 62 6e 36 44 4d 78 36 2f 51 74 4d 6a 59 77 4e 54 74 41 4e 44 6c 4c 55 41 63 68 4a 6b 39 4a 53 68 41 41 48 68 38 67 42 42 55 50 42 32 50 79 38 77 73 4d 44 51 34 50 45 42 45 53 55 6c 64 62 56 56 70 67 5a 56 6c 65 63 48 55 65 50 43 42 38 44 43 4d Data Ascii: u660q7fAeKqJs8O9s8W7wsJ9f9LVlHrSxcvCztePwb6UwqOOyZCli+PW3NPf6KDSz6bTtJ/bobacnZ6f9uL0o+Po7Obr8fbq7wIHr82x8wb7CwT8Bw4O9sz62anAwcLDGwcZxxwPGRD+EyAlFiUn0/HVGCogLyghKzIyG/Ef/c3O5ebn6DMx6/QtMjYwNTtANDlLUAchJk9JShAAHh8gBBUPB2Py8wsMDQ4PEBESUldbVVpgZVlecHUePCB8DCM
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 66 6c 71 4b 72 59 35 57 61 6e 70 69 64 6f 36 69 63 72 61 2b 30 62 37 61 71 69 4c 31 36 63 31 4a 70 61 6d 74 73 62 57 35 76 63 48 46 79 63 33 54 42 73 4d 57 70 6a 4a 52 37 30 38 62 4d 77 38 2f 59 6b 4d 4c 48 79 38 58 4b 30 4e 58 4a 32 74 7a 68 6e 4e 4b 35 78 64 76 67 32 63 69 69 67 5a 69 5a 6d 70 75 63 6e 5a 36 66 6f 4b 47 69 6f 39 54 6e 39 66 69 37 77 36 6f 44 39 66 76 79 2f 67 69 2f 38 66 62 36 39 50 6b 41 42 66 67 4b 44 42 48 4c 44 41 54 4d 71 38 4c 44 78 4d 58 47 78 38 6a 4a 79 73 76 4d 7a 51 6b 46 41 53 54 6a 37 64 51 74 49 43 59 64 4b 54 4c 70 46 78 4d 50 4d 76 48 74 7a 4d 33 6b 35 65 62 6e 36 4f 6e 71 36 2b 7a 74 37 75 38 30 50 79 46 44 4b 51 77 52 39 7a 67 39 51 54 74 41 52 6b 73 2f 52 46 5a 62 45 6b 68 54 4e 56 63 39 49 42 66 31 44 51 34 50 45 42 Data Ascii: flqKrY5Wanpido6icra+0b7aqiL16c1JpamtsbW5vcHFyc3TBsMWpjJR708bMw8/YkMLHy8XK0NXJ2tzhnNK5xdvg2ciigZiZmpucnZ6foKGio9Tn9fi7w6oD9fvy/gi/8fb69PkABfgKDBHLDATMq8LDxMXGx8jJysvMzQkFASTj7dQtICYdKTLpFxMPMvHtzM3k5ebn6Onq6+zt7u80PyFDKQwR9zg9QTtARks/RFZbEkhTNVc9IBf1DQ4PEB
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 6c 35 79 67 6d 70 2b 6c 71 70 36 76 73 62 5a 78 68 61 2b 2f 69 6f 70 35 64 6c 56 73 62 57 35 76 63 48 46 79 63 33 52 31 64 6e 65 6d 71 39 48 42 6e 70 4f 59 66 39 66 4b 30 4d 66 54 33 4a 54 47 79 38 2f 4a 7a 74 54 5a 7a 64 37 67 35 61 44 42 78 75 7a 63 75 61 36 6c 68 4a 75 63 6e 5a 36 66 6f 4b 47 69 6f 36 53 6c 70 76 37 76 32 2f 66 63 78 4d 65 75 42 2f 6b 41 39 67 4d 4d 77 2f 58 36 2f 76 6a 39 42 41 6e 38 44 68 41 56 7a 78 6f 4c 39 68 50 33 33 39 53 7a 79 73 76 4d 7a 63 37 50 30 4e 48 53 30 39 54 56 44 67 59 72 4c 50 48 31 33 44 55 6f 4c 69 55 78 4f 76 45 6b 4b 53 30 6e 4c 44 49 33 4b 7a 77 2b 51 2f 30 6f 49 45 56 47 44 41 4c 67 39 2f 6a 35 2b 76 76 38 2f 66 34 41 41 51 49 44 4e 55 6b 2b 59 46 6b 5a 4a 41 74 6a 56 6c 78 54 58 32 67 67 55 6c 64 62 56 56 70 Data Ascii: l5ygmp+lqp6vsbZxha+/iop5dlVsbW5vcHFyc3R1dnemq9HBnpOYf9fK0MfT3JTGy8/JztTZzd7g5aDBxuzcua6lhJucnZ6foKGio6Slpv7v2/fcxMeuB/kA9gMMw/X6/vj9BAn8DhAVzxoL9hP339SzysvMzc7P0NHS09TVDgYrLPH13DUoLiUxOvEkKS0nLDI3Kzw+Q/0oIEVGDALg9/j5+vv8/f4AAQIDNUk+YFkZJAtjVlxTX2ggUldbVVp
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 71 53 62 61 61 4f 31 74 71 43 76 71 38 43 6d 61 71 6c 73 75 4c 50 49 66 72 53 36 74 4d 61 59 78 62 75 39 6d 73 36 44 78 63 48 57 66 34 57 42 7a 63 6a 64 73 63 76 56 6b 5a 4b 4b 6b 49 79 66 6f 36 58 4e 72 48 79 54 6c 4a 57 57 6c 35 69 5a 6d 70 75 63 6e 5a 37 38 69 6f 75 69 6f 36 53 6c 70 71 65 6f 71 61 71 72 72 4b 30 42 39 41 55 48 42 51 4b 30 39 77 73 48 2b 63 45 4e 41 52 48 47 32 61 6e 41 77 63 4c 44 78 4d 58 47 78 79 61 7a 74 4d 76 4d 7a 63 37 50 30 4e 48 53 45 78 67 63 46 68 73 68 4a 68 6f 66 4d 54 62 73 49 51 49 30 4d 7a 66 32 35 51 54 6e 38 4e 50 71 36 2b 7a 74 37 75 2f 77 38 66 4c 7a 39 50 55 37 52 7a 78 50 53 45 46 4c 55 67 31 43 55 45 5a 63 37 51 55 47 42 77 67 4a 43 67 73 4d 44 51 34 50 45 42 63 59 45 31 68 6b 57 57 78 6c 58 6d 68 76 4b 6c 39 74 Data Ascii: qSbaaO1tqCvq8CmaqlsuLPIfrS6tMaYxbu9ms6DxcHWf4WBzcjdscvVkZKKkIyfo6XNrHyTlJWWl5iZmpucnZ78iouio6SlpqeoqaqrrK0B9AUHBQK09wsH+cENARHG2anAwcLDxMXGxyaztMvMzc7P0NHSExgcFhshJhofMTbsIQI0Mzf25QTn8NPq6+zt7u/w8fLz9PU7RzxPSEFLUg1CUEZc7QUGBwgJCgsMDQ4PEBcYE1hkWWxlXmhvKl9t
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 56 6d 5a 36 79 34 72 63 43 35 73 72 7a 44 66 72 6d 33 74 4c 69 44 75 63 62 46 79 62 76 4e 77 61 48 4e 77 74 58 4f 78 39 48 59 74 64 58 61 30 64 33 54 32 74 71 56 30 74 37 54 35 74 2f 59 34 75 6d 6b 32 65 66 64 38 36 53 6f 68 35 36 66 6f 4b 47 69 6f 36 53 6c 70 71 65 6f 71 51 4c 30 2b 76 48 39 42 37 37 77 39 66 6e 7a 2b 50 34 45 39 77 6b 4c 45 4d 72 33 37 41 6f 59 31 64 41 56 47 67 73 5a 49 66 73 50 46 78 45 51 49 68 34 69 32 4e 67 6d 4b 43 34 69 48 4e 37 68 35 78 34 72 4b 69 34 67 4d 69 59 47 4d 69 63 36 4d 79 77 32 50 52 6f 36 50 7a 5a 43 4f 44 38 2f 2b 55 6f 39 51 7a 70 47 54 77 63 35 50 6b 49 38 51 55 64 4d 51 46 46 54 57 42 4e 41 4e 56 4a 67 48 68 6c 64 59 6c 4e 68 61 55 52 58 58 31 6c 59 61 6d 5a 71 49 53 46 66 5a 58 4d 6c 4b 43 6b 68 4b 43 4e 53 64 Data Ascii: VmZ6y4rcC5srzDfrm3tLiDucbFybvNwaHNwtXOx9HYtdXa0d3T2tqV0t7T5t/Y4umk2efd86Soh56foKGio6SlpqeoqQL0+vH9B77w9fnz+P4E9wkLEMr37AoY1dAVGgsZIfsPFxEQIh4i2NgmKC4iHN7h5x4rKi4gMiYGMic6Myw2PRo6PzZCOD8/+Uo9QzpGTwc5PkI8QUdMQFFTWBNANVJgHhldYlNhaURXX1lYamZqISFfZXMlKCkhKCNSd
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 43 72 73 42 76 74 63 50 45 77 73 61 65 78 4c 33 48 71 4c 7a 46 77 63 44 53 66 35 32 42 32 63 7a 53 79 64 58 65 6c 74 76 5a 34 37 57 7a 6e 70 66 56 35 39 66 68 36 4b 50 6f 33 4e 6e 73 36 65 6d 6c 75 49 69 66 6f 4b 47 69 6f 36 53 6c 70 71 65 6f 71 61 71 72 72 4b 32 75 72 37 43 78 73 67 76 39 42 50 6f 48 45 4d 66 69 33 75 50 6c 30 73 63 47 46 42 55 54 46 2b 34 56 44 68 6a 34 44 52 59 53 45 53 50 62 30 42 55 62 46 79 6b 75 34 74 66 66 4c 79 33 6f 4a 52 38 74 4a 43 30 6e 4e 65 72 74 41 64 44 6e 36 4f 6e 71 36 2b 7a 74 37 75 2f 77 38 66 4c 7a 39 50 58 32 56 51 58 35 44 41 77 47 47 65 67 41 41 51 49 44 42 41 55 47 42 77 67 4a 43 67 74 56 55 78 5a 6d 57 56 39 57 59 6d 73 6a 62 44 78 73 58 69 34 70 5a 6d 64 47 55 6b 38 78 4b 69 70 7a 64 58 5a 32 65 6e 31 2f 65 58 Data Ascii: CrsBvtcPEwsaexL3HqLzFwcDSf52B2czSydXeltvZ47WznpfV59fh6KPo3Nns6emluIifoKGio6SlpqeoqaqrrK2ur7Cxsgv9BPoHEMfi3uPl0scGFBUTF+4VDhj4DRYSESPb0BUbFyku4tffLy3oJR8tJC0nNertAdDn6Onq6+zt7u/w8fLz9PX2VQX5DAwGGegAAQIDBAUGBwgJCgtVUxZmWV9WYmsjbDxsXi4pZmdGUk8xKipzdXZ2en1/eX
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 67 63 71 61 79 72 79 4d 68 38 54 46 70 4c 43 74 6a 34 69 49 30 64 50 55 31 4e 6a 62 33 64 66 54 33 75 44 57 30 5a 7a 54 34 4f 44 6e 33 65 50 72 32 4f 7a 69 36 65 6d 6a 70 71 65 66 2b 34 75 69 6f 36 53 6c 70 71 65 6f 71 61 71 72 72 4b 32 75 72 37 43 78 43 76 77 44 2b 51 59 50 78 67 30 41 45 50 41 48 44 41 55 51 46 78 66 4c 43 78 73 56 43 78 30 54 47 68 72 55 31 73 34 72 75 74 48 53 30 39 54 56 31 74 66 59 32 64 72 62 33 4e 33 65 33 2b 44 68 34 75 50 6b 50 54 41 32 4c 54 6c 43 2b 54 56 44 45 55 55 4a 2b 66 73 50 33 76 58 32 39 2f 6a 35 2b 76 76 38 2f 66 34 41 41 51 49 44 42 41 56 6a 45 77 67 61 47 68 73 63 46 69 6e 34 45 42 45 53 45 78 51 56 46 68 63 59 47 52 6f 62 65 57 4a 71 63 6d 56 38 44 43 4d 6b 4a 53 59 6e 4b 43 6b 71 4b 79 77 74 4c 69 38 77 4d 54 4a Data Ascii: gcqayryMh8TFpLCtj4iI0dPU1Njb3dfT3uDW0ZzT4ODn3ePr2Ozi6emjpqef+4uio6SlpqeoqaqrrK2ur7CxCvwD+QYPxg0AEPAHDAUQFxfLCxsVCx0TGhrU1s4rutHS09TV1tfY2drb3N3e3+Dh4uPkPTA2LTlC+TVDEUUJ+fsP3vX29/j5+vv8/f4AAQIDBAVjEwgaGhscFin4EBESExQVFhcYGRobeWJqcmV8DCMkJSYnKCkqKywtLi8wMTJ
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 58 70 37 66 48 31 2b 66 39 50 59 79 39 66 48 7a 59 37 47 77 38 6a 46 6e 4d 6e 4b 6c 34 2f 72 65 35 4b 54 6c 4a 57 57 6c 35 69 5a 6d 70 75 63 6e 5a 36 66 6f 4b 48 6c 35 50 66 71 72 66 62 32 38 2f 33 61 32 63 61 31 79 5a 71 78 73 72 4f 30 76 66 77 4e 42 2f 77 50 42 51 77 4d 78 73 6a 41 48 61 79 74 72 73 58 47 78 38 6a 4a 79 73 76 4d 4a 42 41 69 30 42 55 62 49 42 67 71 4c 39 66 31 32 52 6f 66 49 78 30 69 4b 43 30 68 4a 6a 67 39 49 53 59 72 4c 79 6b 75 4e 44 6b 74 4d 6b 52 4a 41 42 6f 66 53 45 4a 44 43 54 59 56 35 50 76 38 2f 66 34 41 41 51 49 44 57 6b 5a 59 42 79 6c 4f 55 46 6b 69 44 53 73 50 56 6d 5a 67 56 6d 68 65 5a 57 55 67 49 68 70 32 42 67 63 65 48 79 41 68 49 69 4d 6b 4a 53 59 6e 4b 43 6c 7a 63 53 77 31 62 57 70 76 62 45 4e 77 63 54 55 33 56 46 55 35 Data Ascii: Xp7fH1+f9PYy9fHzY7Gw8jFnMnKl4/re5KTlJWWl5iZmpucnZ6foKHl5Pfqrfb28/3a2ca1yZqxsrO0vfwNB/wPBQwMxsjAHaytrsXGx8jJysvMJBAi0BUbIBgqL9f12RofIx0iKC0hJjg9ISYrLykuNDktMkRJABofSEJDCTYV5Pv8/f4AAQIDWkZYBylOUFkiDSsPVmZgVmheZWUgIhp2BgceHyAhIiMkJSYnKClzcSw1bWpvbENwcTU3VFU5
2024-12-17 10:51:22 UTC	1369	IN	Data Raw: 43 65 67 74 35 75 68 59 61 48 69 4d 2f 50 33 38 2f 56 71 49 2f 57 35 75 44 57 36 4e 37 6c 35 61 44 69 36 4f 76 78 38 61 71 66 36 65 2f 72 39 36 32 6c 41 70 47 6f 71 61 71 72 72 4b 32 75 72 77 50 32 42 77 6b 48 42 4c 59 47 2f 52 47 36 36 77 38 4e 44 41 6b 55 42 38 6f 4b 47 68 51 4b 48 42 49 5a 47 64 4d 66 45 79 49 66 48 53 67 59 33 39 51 6f 48 43 49 65 48 53 2f 6b 33 44 6e 49 33 2b 44 68 34 75 50 6b 35 65 62 6e 36 4f 6e 71 4d 6a 4a 43 4d 6a 6a 34 4f 30 46 45 53 6b 6f 44 39 30 4a 49 52 46 41 47 44 46 4e 49 52 6c 41 4c 53 6c 70 55 53 6c 78 53 57 56 6b 55 58 31 4e 69 59 42 6f 53 62 76 30 56 46 68 63 59 47 52 6f 62 48 42 30 65 48 79 41 68 49 69 4d 6b 65 32 64 35 4b 47 70 39 68 48 70 77 59 48 53 42 68 6e 65 47 69 46 35 61 4e 31 55 35 6a 49 43 50 6a 55 79 48 68 Data Ascii: Cegt5uhYaHiM/P38/VqI/W5uDW6N7l5aDi6Ovx8aqf6e/r962lApGoqaqrrK2urwP2BwkHBLYG/RG66w8NDAkUB8oKGhQKHBIZGdMfEyIfHSgY39QoHCIeHS/k3DnI3+Dh4uPk5ebn6OnqMjJCMjj4O0FESkoD90JIRFAGDFNIRlALSlpUSlxSWVkUX1NiYBoSbv0VFhcYGRobHB0eHyAhIiMke2d5KGp9hHpwYHSBhneGiF5aN1U5jICPjUyHh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49732	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:23 UTC	861	OUT	GET / HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:23 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:23 UTC	901	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 75 4b 6f 31 4d 79 75 7a 77 69 46 57 42 6b 2f 43 74 36 68 66 55 37 75 47 6e 36 47 32 6c 63 51 2b 6e 46 52 39 6f 45 45 37 7a 33 65 44 41 62 53 4d 39 74 44 44 42 47 63 48 31 64 57 44 32 41 55 65 44 32 49 49 63 43 68 59 74 54 6c 43 39 57 45 4b 43 77 43 6a 71 43 46 4e 74 4d 54 76 79 47 6b 37 2b 37 61 45 4b 46 50 6f 6f 6c 41 3d 24 36 4e 6f 54 58 73 45 56 4c 57 74 30 31 70 74 31 75 4c 47 59 77 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: uKo1MyuzwiFWBk/Ct6hfU7uGn6G2lcQ+nFR9oEE7z3eDAbSM9tDDBGcH1dWD2AUeD2IIcChYtTlC9WEKCwCjqCFNtMTvyGk7+7aEKFPoolA=$6NoTXsEVLWt01pt1uLGYwg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 32 33 31 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 231b<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 53 43 68 31 36 32 34 35 31 4e 71 48 45 32 32 32 36 69 45 64 47 48 6c 48 32 32 51 6a 70 79 5f 76 67 79 7a 65 6a 4a 34 71 57 4c 7a 30 6c 42 4c 54 50 55 66 67 4b 35 59 42 6c 30 2e 50 35 5a 70 79 4f 72 6b 74 4c 79 50 35 49 5f 79 53 6c 49 66 35 66 4f 69 46 4f 51 68 50 67 75 34 49 49 55 6c 4d 38 50 4c 66 68 7a 39 36 6b 32 4e 44 62 77 51 45 48 31 54 74 52 7a 47 71 50 31 30 61 68 78 54 76 66 68 6e 65 42 38 4a 72 38 43 64 58 6d 34 6a 49 79 74 66 54 4b 46 7a 71 43 2e 4e 79 4a 76 77 6a 4c 32 39 59 49 30 66 71 73 42 58 4f 5a 70 6a 6a 70 41 6d 77 45 45 45 68 6f 49 46 4c 54 54 77 67 6b 5f 6c 43 6e 38 59 4d 45 72 34 66 4b 68 67 71 4e 65 34 41 55 37 42 59 2e 77 42 78 74 36 74 77 56 6e 49 44 6b 68 63 59 74 68 4d 67 75 6d 4b 6e 32 43 68 30 31 6a 55 75 41 45 6f 34 66 79 39 Data Ascii: SCh162451NqHE2226iEdGHlH22Qjpy_vgyzejJ4qWLz0lBLTPUfgK5YBl0.P5ZpyOrktLyP5I_ySlIf5fOiFOQhPgu4IIUlM8PLfhz96k2NDbwQEH1TtRzGqP10ahxTvfhneB8Jr8CdXm4jIytfTKFzqC.NyJvwjL29YI0fqsBXOZpjjpAmwEEEhoIFLTTwgk_lCn8YMEr4fKhgqNe4AU7BY.wBxt6twVnIDkhcYthMgumKn2Ch01jUuAEo4fy9
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 44 6b 54 4f 75 6d 4f 41 6f 38 5a 46 68 6f 45 78 45 4e 52 54 77 53 4f 4c 4d 53 38 30 49 50 5f 74 6b 7a 42 47 4e 32 57 31 39 34 51 4d 45 72 68 39 69 4d 30 4e 78 59 44 77 59 58 55 39 63 53 78 5a 48 51 79 53 6c 47 45 6d 38 57 7a 7a 71 73 76 65 6a 75 38 5a 7a 56 48 4d 31 74 41 4f 74 56 68 44 32 44 65 6a 59 6b 53 52 59 4a 4c 43 75 6c 6f 79 5f 64 6e 31 53 4b 38 59 63 79 42 47 30 52 6b 73 70 32 34 70 78 33 34 54 5a 64 33 50 76 74 32 48 39 2e 72 71 49 71 6d 64 45 59 6b 63 54 75 53 5a 50 55 53 36 6a 73 38 72 57 5a 5f 4a 52 36 30 48 46 31 68 51 51 39 6c 75 62 2e 62 2e 54 6c 58 39 7a 67 66 47 73 36 72 6c 38 66 57 41 7a 30 57 65 34 39 33 49 2e 77 76 6c 59 7a 33 47 42 45 4b 6b 52 41 63 55 61 6e 38 34 46 75 35 37 2e 72 30 64 4e 5f 33 31 48 62 65 6c 51 52 44 6f 42 51 63 Data Ascii: DkTOumOAo8ZFhoExENRTwSOLMS80IP_tkzBGN2W194QMErh9iM0NxYDwYXU9cSxZHQySlGEm8Wzzqsveju8ZzVHM1tAOtVhD2DejYkSRYJLCuloy_dn1SK8YcyBG0Rksp24px34TZd3Pvt2H9.rqIqmdEYkcTuSZPUS6js8rWZ_JR60HF1hQQ9lub.b.TlX9zgfGs6rl8fWAz0We493I.wvlYz3GBEKkRAcUan84Fu57.r0dN_31HbelQRDoBQc
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 72 61 70 35 72 69 67 53 4b 58 4a 53 34 64 61 32 52 56 7a 4f 61 52 32 39 72 66 58 73 57 4c 75 58 6a 55 34 6f 58 72 74 43 6d 59 38 4f 6b 59 6e 32 31 4f 58 67 72 35 4f 46 63 2e 31 36 36 6a 4c 4e 39 48 34 70 6f 58 70 6d 77 6a 4c 30 34 48 34 39 46 47 62 55 43 6b 4c 53 44 71 6a 54 32 2e 47 31 6a 75 33 52 71 30 43 31 76 42 58 4c 72 73 67 50 6e 33 53 52 55 7a 65 6f 62 49 4c 57 4d 6f 5f 70 66 79 67 52 77 59 6d 76 4a 64 69 61 64 76 6a 6b 53 37 73 75 64 35 57 2e 34 57 4d 50 61 51 34 79 56 32 59 63 56 48 6d 6e 61 64 73 65 4f 71 6b 62 30 4f 42 46 6d 5a 61 63 61 30 56 41 42 36 4f 6b 67 36 51 59 59 67 76 45 4d 45 48 6b 42 4f 79 6c 66 74 58 48 59 70 31 2e 38 4c 55 75 37 41 4b 52 70 69 4e 57 76 56 47 32 43 62 70 42 30 57 72 55 33 43 43 49 74 30 2e 52 78 4b 6a 61 4b 53 30 Data Ascii: rap5rigSKXJS4da2RVzOaR29rfXsWLuXjU4oXrtCmY8OkYn21OXgr5OFc.166jLN9H4poXpmwjL04H49FGbUCkLSDqjT2.G1ju3Rq0C1vBXLrsgPn3SRUzeobILWMo_pfygRwYmvJdiadvjkS7sud5W.4WMPaQ4yV2YcVHmnadseOqkb0OBFmZaca0VAB6Okg6QYYgvEMEHkBOylftXHYp1.8LUu7AKRpiNWvVG2CbpB0WrU3CCIt0.RxKjaKS0
2024-12-17 10:51:23 UTC	1369	IN	Data Raw: 62 6a 65 72 71 52 5a 4e 34 77 76 5a 50 51 6f 62 65 55 42 77 72 4b 42 76 70 59 57 66 58 4f 4c 35 77 6f 47 79 6f 46 6e 68 6a 6d 7a 75 42 36 4d 78 53 46 71 4d 78 35 33 61 33 4a 62 74 45 44 66 6a 41 37 4b 64 33 6d 57 75 35 6f 6c 49 49 4b 6c 4b 41 34 33 4b 57 61 69 6f 52 79 31 56 5a 4d 49 4f 66 78 39 35 4d 58 45 37 43 71 6b 45 54 7a 45 41 2e 2e 62 7a 50 36 57 63 64 6e 78 55 2e 6e 51 35 31 4d 61 5f 73 44 4a 38 42 38 70 54 39 39 4e 52 51 5a 51 50 37 47 6c 6d 73 30 69 54 6a 35 64 51 61 39 47 71 68 53 79 53 2e 43 59 4e 73 69 78 33 62 6e 4b 6b 4e 6b 65 4b 58 64 36 5f 47 4f 65 76 43 66 50 76 5a 59 67 41 5a 58 67 76 4c 55 43 49 52 35 37 41 45 4a 39 2e 64 30 5f 32 6f 4e 34 43 67 57 54 69 5a 65 79 58 4f 62 34 7a 5f 62 4e 36 6e 5a 41 68 6a 64 56 65 52 51 35 53 65 39 38 Data Ascii: bjerqRZN4wvZPQobeUBwrKBvpYWfXOL5woGyoFnhjmzuB6MxSFqMx53a3JbtEDfjA7Kd3mWu5olIIKlKA43KWaioRy1VZMIOfx95MXE7CqkETzEA..bzP6WcdnxU.nQ51Ma_sDJ8B8pT99NRQZQP7Glms0iTj5dQa9GqhSyS.CYNsix3bnKkNkeKXd6_GOevCfPvZYgAZXgvLUCIR57AEJ9.d0_2oN4CgWTiZeyXOb4z_bN6nZAhjdVeRQ5Se98
2024-12-17 10:51:23 UTC	781	IN	Data Raw: 61 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 Data Ascii: a';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).ind
2024-12-17 10:51:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49735	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:24 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:24 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 10:51:24 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 02/Gu0XX6ovyGrOynOpGL3VUl8w+JQrcEaA=$3woiB9jXfT9EVZTL Server: cloudflare CF-RAY: 8f365b9799575e61-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:24 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49736	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:24 UTC	812	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8f365b70ac0041af/1734432682624/c6bba5d7ab5d02a2179f1ee2daa5f799583ae325c0767023a7b7f6a7cbe65851/mbyYJbCYGAkTQGK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:25 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 17 Dec 2024 10:51:24 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-17 10:51:25 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 78 72 75 6c 31 36 74 64 41 71 49 58 6e 78 37 69 32 71 58 33 6d 56 67 36 34 79 58 41 64 6e 41 6a 70 37 66 32 70 38 76 6d 57 46 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gxrul16tdAqIXnx7i2qX3mVg64yXAdnAjp7f2p8vmWFEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-17 10:51:25 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49737	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:26 UTC	783	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f365b70ac0041af/1734432682625/MGqtdmfqwZAmaAR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:26 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:26 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f365ba4aae44219-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:26 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 2b 08 02 00 00 00 b8 9a 3c f2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR4+<IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49738	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:28 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f365b70ac0041af/1734432682625/MGqtdmfqwZAmaAR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:28 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:28 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f365baf0ec0c347-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 2b 08 02 00 00 00 b8 9a 3c f2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR4+<IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49739	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:28 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 26711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:28 UTC	16384	OUT	Data Raw: 76 5f 38 66 33 36 35 62 37 30 61 63 30 30 34 31 61 66 3d 55 35 73 58 45 4a 6d 51 68 4a 68 6a 35 65 51 48 31 6c 65 69 58 64 58 75 48 6d 4f 37 2d 65 44 58 67 73 37 46 65 2d 58 57 55 73 5a 4a 78 65 4c 58 59 35 37 4a 65 45 58 30 48 4a 6e 61 73 65 55 4a 65 6d 33 31 65 33 58 65 39 65 7a 59 6d 65 6d 67 75 71 59 35 58 65 49 58 4f 4f 65 35 6c 57 6d 30 4f 36 67 73 4a 46 65 64 5a 65 79 79 65 30 49 57 5a 65 6d 58 37 6a 77 67 57 4f 44 42 65 55 57 6d 6a 31 79 4c 37 42 6d 59 65 59 48 65 62 51 36 59 6d 72 6f 65 6d 63 4f 65 65 74 75 58 65 69 55 38 6e 65 4a 24 52 74 6f 6a 6c 79 50 6f 59 74 65 6d 6a 35 38 53 6f 31 39 41 4e 74 55 52 6c 77 66 43 58 59 50 41 73 5a 44 73 55 47 6d 65 6d 37 55 38 68 37 73 6c 5a 44 30 6d 4e 6c 25 32 62 52 7a 4c 4c 68 6d 55 75 2b 70 79 61 76 74 2d Data Ascii: v_8f365b70ac0041af=U5sXEJmQhJhj5eQH1leiXdXuHmO7-eDXgs7Fe-XWUsZJxeLXY57JeEX0HJnaseUJem31e3Xe9ezYmemguqY5XeIXOOe5lWm0O6gsJFedZeyye0IWZemX7jwgWODBeUWmj1yL7BmYeYHebQ6YmroemcOeetuXeiU8neJ$RtojlyPoYtemj58So19ANtURlwfCXYPAsZDsUGmem7U8h7slZD0mNl%2bRzLLhmUu+pyavt-
2024-12-17 10:51:28 UTC	10327	OUT	Data Raw: 42 6d 32 65 6c 65 7a 72 44 65 73 57 4a 68 75 36 65 42 65 43 5a 65 53 43 41 37 57 61 2b 54 61 72 4f 65 6d 50 6d 48 65 41 65 75 57 6d 56 65 50 51 62 57 68 78 65 55 58 65 31 65 5a 47 61 68 65 31 6d 77 4f 7a 65 6d 4f 65 37 65 61 65 59 4d 65 52 65 7a 58 61 39 6d 6d 65 31 57 4a 42 6d 4e 65 79 49 75 31 65 36 65 43 57 4f 39 6d 50 65 57 5a 6d 6a 65 68 65 56 5a 75 6a 65 74 65 66 5a 75 51 6d 62 65 67 58 37 73 65 54 65 4f 58 4a 6e 6d 36 65 4f 6e 6d 65 65 73 78 2d 68 4f 6f 48 67 57 6f 58 37 4a 65 5a 65 65 64 71 35 65 6a 65 67 57 59 74 58 77 57 30 65 4a 51 6d 53 65 77 48 59 5a 58 37 65 77 48 65 6e 65 42 65 65 5a 75 41 65 61 65 50 76 4f 68 6d 4f 39 77 48 61 46 6d 48 58 41 36 4c 78 57 67 65 67 51 37 5a 6d 4d 65 56 57 4a 4f 6d 7a 65 4f 58 61 41 6d 68 65 76 65 4a 39 65 51 Data Ascii: Bm2elezrDesWJhu6eBeCZeSCA7Wa+TarOemPmHeAeuWmVePQbWhxeUXe1eZGahe1mwOzemOe7eaeYMeRezXa9mme1WJBmNeyIu1e6eCWO9mPeWZmjeheVZujetefZuQmbegX7seTeOXJnm6eOnmeesx-hOoHgWoX7JeZeedq5ejegWYtXwW0eJQmSewHYZX7ewHeneBeeZuAeaePvOhmO9wHaFmHXA6LxWgegQ7ZmMeVWJOmzeOXaAmheveJ9eQ
2024-12-17 10:51:28 UTC	334	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 22920 Connection: close cf-chl-gen: tOaiYXLpl2t4TT1teGzmq1VyNkrta6F5uaotYN2CHIary4bs1PJzGnlm20ae3R5xEj+/PrkLZXIx9fwHhg==$hvU7MbdNvz0qdYqp Server: cloudflare CF-RAY: 8f365baf19c64262-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:28 UTC	1035	IN	Data Raw: 75 36 36 30 71 37 66 41 65 4b 71 4a 73 38 4f 39 73 38 57 37 77 73 4a 39 66 39 4c 56 6c 48 72 53 78 63 76 43 7a 74 65 50 77 62 36 55 77 71 4f 4f 79 5a 43 6c 69 2b 50 57 33 4e 50 66 36 4b 44 53 7a 36 62 54 74 4a 2f 62 6f 62 61 63 6e 5a 36 66 39 75 4c 30 6f 2b 50 6f 37 4f 62 72 38 66 62 71 37 77 49 48 72 38 32 78 38 77 62 37 43 77 54 38 42 77 34 4f 39 73 7a 36 32 61 6e 41 77 63 4c 44 47 77 63 5a 78 78 77 50 47 52 44 2b 45 79 41 6c 46 69 55 6e 30 2f 48 56 47 43 6f 67 4c 79 67 68 4b 7a 49 79 47 2f 45 66 2f 63 33 4f 35 65 62 6e 36 44 4d 78 36 2f 51 74 4d 6a 59 77 4e 54 74 41 4e 44 6c 4c 55 41 63 68 4a 6b 39 4a 53 68 41 41 48 68 38 67 42 42 55 50 42 32 50 79 38 77 73 4d 44 51 34 50 45 42 45 53 55 6c 64 62 56 56 70 67 5a 56 6c 65 63 48 55 65 50 43 42 38 44 43 4d Data Ascii: u660q7fAeKqJs8O9s8W7wsJ9f9LVlHrSxcvCztePwb6UwqOOyZCli+PW3NPf6KDSz6bTtJ/bobacnZ6f9uL0o+Po7Obr8fbq7wIHr82x8wb7CwT8Bw4O9sz62anAwcLDGwcZxxwPGRD+EyAlFiUn0/HVGCogLyghKzIyG/Ef/c3O5ebn6DMx6/QtMjYwNTtANDlLUAchJk9JShAAHh8gBBUPB2Py8wsMDQ4PEBESUldbVVpgZVlecHUePCB8DCM
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 76 63 48 46 79 63 33 54 42 74 38 53 61 7a 59 71 56 66 4e 54 48 7a 63 54 51 32 5a 48 44 79 4d 7a 47 79 39 48 57 79 74 76 64 34 70 33 54 32 64 36 30 35 4e 37 73 77 4e 79 6c 68 4a 75 63 6e 5a 36 66 6f 4b 47 69 6f 36 53 6c 70 75 72 65 31 41 54 41 78 71 30 47 2b 50 37 31 41 67 76 43 39 50 6e 39 39 2f 77 44 43 50 73 4e 44 78 54 4f 42 51 73 51 35 52 59 51 2b 68 49 65 45 42 63 53 4a 39 71 35 30 4e 48 53 30 39 54 56 31 74 66 59 32 64 72 62 42 52 41 30 4d 54 44 31 2f 4f 4d 38 4c 7a 55 73 4f 45 48 34 4b 7a 41 30 4c 6a 4d 35 50 6a 4a 44 52 55 6f 46 4f 30 46 47 48 45 78 47 48 30 4a 55 53 6c 46 52 45 4f 34 47 42 77 67 4a 43 67 73 4d 44 51 34 50 45 42 46 63 56 30 42 6a 4b 54 45 59 63 47 4e 70 59 47 78 31 4c 56 39 6b 61 47 4a 6e 62 58 4a 6d 64 33 6c 2b 4f 57 39 31 65 6c Data Ascii: vcHFyc3TBt8SazYqVfNTHzcTQ2ZHDyMzGy9HWytvd4p3T2d605N7swNylhJucnZ6foKGio6Slpure1ATAxq0G+P71AgvC9Pn99/wDCPsNDxTOBQsQ5RYQ+hIeEBcSJ9q50NHS09TV1tfY2drbBRA0MTD1/OM8LzUsOEH4KzA0LjM5PjJDRUoFO0FGHExGH0JUSlFREO4GBwgJCgsMDQ4PEBFcV0BjKTEYcGNpYGx1LV9kaGJnbXJmd3l+OW91el
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 64 6e 64 34 65 58 70 37 66 4d 7a 43 79 36 69 53 6e 49 50 62 7a 74 54 4c 31 2b 43 59 79 73 2f 54 7a 64 4c 59 33 64 48 69 35 4f 6d 6b 75 65 44 49 78 73 6d 77 6e 61 75 66 39 2b 72 77 35 2f 50 38 74 4f 62 72 37 2b 6e 75 39 50 6e 74 2f 67 45 47 77 4f 41 4c 41 4e 76 69 79 73 57 6b 75 37 79 39 76 72 2f 41 77 63 4c 44 78 4d 58 47 2b 69 41 44 39 2b 44 6d 7a 53 59 5a 48 78 59 69 4b 2b 49 56 47 68 34 59 48 53 4d 6f 48 43 30 76 4e 4f 34 56 4f 68 30 53 2b 76 4c 52 36 4f 6e 71 36 2b 7a 74 37 75 2f 77 38 66 4c 7a 47 44 67 63 4a 77 77 55 2b 6c 4e 47 54 45 4e 50 57 42 42 43 52 30 74 46 53 6c 42 56 53 56 70 63 59 52 77 79 55 6a 5a 42 4a 69 44 2b 46 68 63 59 47 52 6f 62 48 42 31 37 4f 67 6f 4c 49 69 4d 6b 4a 53 59 6e 4b 43 6d 41 62 48 34 74 64 49 46 2f 66 6c 56 37 64 59 64 Data Ascii: dnd4eXp7fMzCy6iSnIPbztTL1+CYys/TzdLY3dHi5OmkueDIxsmwnauf9+rw5/P8tObr7+nu9Pnt/gEGwOALANviysWku7y9vr/AwcLDxMXG+iAD9+DmzSYZHxYiK+IVGh4YHSMoHC0vNO4VOh0S+vLR6Onq6+zt7u/w8fLzGDgcJwwU+lNGTENPWBBCR0tFSlBVSVpcYRwyUjZBJiD+FhcYGRobHB17OgoLIiMkJSYnKCmAbH4tdIF/flV7dYd
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 6f 4e 2b 77 38 2f 45 31 39 44 4a 30 39 71 56 79 74 6a 4f 35 4a 72 57 33 4e 33 56 34 37 72 48 77 63 47 57 74 4c 57 32 6d 71 4c 59 36 36 57 4a 6f 4b 47 69 6f 36 53 6c 70 71 65 6f 71 61 71 72 73 72 4f 75 38 77 44 30 43 41 48 35 42 41 76 46 41 66 37 37 41 4d 6f 42 44 67 30 52 41 78 55 4a 36 42 55 4b 48 52 59 50 47 53 44 38 48 53 49 5a 4a 52 73 69 49 74 77 61 4a 68 73 75 4a 79 41 71 4d 65 73 68 4c 79 55 37 36 38 33 6b 35 65 62 6e 36 4f 6e 71 36 2b 7a 74 37 75 2f 32 39 2f 4a 4c 50 6b 51 37 52 31 41 49 4f 6a 39 44 50 55 4a 49 54 55 46 53 56 46 6b 55 51 54 5a 54 59 52 38 61 58 6d 4e 55 59 6d 70 46 57 47 42 61 57 57 74 6e 61 79 49 69 62 33 46 33 61 32 55 6f 4b 7a 46 6e 64 48 4e 33 61 58 74 76 54 33 74 77 67 33 78 31 66 34 5a 6a 67 34 68 2f 69 34 47 49 69 45 4f 54 Data Ascii: oN+w8/E19DJ09qVytjO5JrW3N3V47rHwcGWtLW2mqLY66WJoKGio6SlpqeoqaqrsrOu8wD0CAH5BAvFAf77AMoBDg0RAxUJ6BUKHRYPGSD8HSIZJRsiItwaJhsuJyAqMeshLyU7683k5ebn6Onq6+zt7u/29/JLPkQ7R1AIOj9DPUJITUFSVFkUQTZTYR8aXmNUYmpFWGBaWWtnayIib3F3a2UoKzFndHN3aXtvT3twg3x1f4Zjg4h/i4GIiEOT
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 62 4d 30 63 58 57 32 4e 32 59 78 62 72 58 35 61 4f 65 34 75 66 59 35 75 37 4a 33 4f 54 65 33 65 2f 72 37 36 61 6d 35 4f 72 34 71 71 32 75 70 71 32 6f 73 64 6a 36 38 50 4b 38 30 39 2f 55 35 2b 44 5a 34 2b 72 32 36 4f 6a 74 35 50 44 6d 37 65 30 41 35 65 76 32 35 2f 54 30 39 65 33 73 2f 76 44 77 7a 53 76 50 2f 69 45 58 47 65 4c 35 42 76 6f 4f 42 77 41 4b 45 52 30 50 44 78 51 4c 46 77 30 55 46 43 59 4f 47 42 59 58 47 79 51 58 48 52 66 77 54 76 49 69 52 44 6f 38 42 68 30 70 48 6a 45 71 49 79 30 30 51 44 49 79 4e 79 34 36 4d 44 63 33 53 54 51 35 50 54 6f 30 50 54 5a 41 52 7a 56 4a 50 30 5a 47 57 45 31 4c 51 55 42 48 52 55 6c 45 4b 77 30 6b 4a 53 59 6e 4b 43 6b 71 4b 32 6b 32 53 52 6b 77 4d 54 49 7a 6b 52 38 67 4e 7a 67 35 4f 6e 70 2f 67 33 32 43 69 49 32 42 68 Data Ascii: bM0cXW2N2YxbrX5aOe4ufY5u7J3OTe3e/r76am5Or4qq2upq2osdj68PK809/U5+DZ4+r26Ojt5PDm7e0A5ev25/T09e3s/vDwzSvP/iEXGeL5BvoOBwAKER0PDxQLFw0UFCYOGBYXGyQXHRfwTvIiRDo8Bh0pHjEqIy00QDIyNy46MDc3STQ5PTo0PTZARzVJP0ZGWE1LQUBHRUlEKw0kJSYnKCkqK2k2SRkwMTIzkR8gNzg5Onp/g32CiI2Bh
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 4f 32 75 4f 62 31 75 53 79 35 71 71 62 6e 62 43 41 6c 35 69 5a 6d 70 75 63 6e 5a 36 66 6f 4b 47 69 6f 36 53 6c 70 67 57 30 71 62 75 37 76 4c 32 33 79 70 71 78 73 72 4f 30 74 62 61 33 75 4c 6d 36 75 37 77 62 42 41 77 55 42 78 36 74 78 4d 58 47 78 38 6a 4a 79 73 76 4d 7a 63 37 50 30 4e 48 53 30 78 67 65 47 69 77 78 46 65 45 78 4a 6a 55 56 38 65 63 66 34 67 48 6b 2b 51 4c 52 36 4f 6e 71 36 2b 7a 74 37 75 2f 77 38 66 4c 7a 39 50 58 32 39 7a 78 43 50 6c 42 56 4f 51 5a 58 4b 46 51 39 46 67 78 44 44 78 48 79 43 67 73 4d 44 51 34 50 45 42 45 53 45 78 51 56 63 77 45 59 47 52 6f 62 48 42 30 65 48 79 41 68 49 69 4e 70 65 32 74 31 66 44 64 36 66 58 47 44 63 33 32 45 56 58 64 35 64 59 71 43 69 30 42 43 56 53 55 38 50 54 34 2f 51 45 46 43 51 36 46 67 4d 45 64 49 53 55 Data Ascii: O2uOb1uSy5qqbnbCAl5iZmpucnZ6foKGio6SlpgW0qbu7vL23ypqxsrO0tba3uLm6u7wbBAwUBx6txMXGx8jJysvMzc7P0NHS0xgeGiwxFeExJjUV8ecf4gHk+QLR6Onq6+zt7u/w8fLz9PX29zxCPlBVOQZXKFQ9FgxDDxHyCgsMDQ4PEBESExQVcwEYGRobHB0eHyAhIiNpe2t1fDd6fXGDc32EVXd5dYqCi0BCVSU8PT4/QEFCQ6FgMEdISU
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 6b 5a 4c 70 31 65 65 57 33 4f 72 72 36 65 33 46 36 2b 54 75 7a 2b 50 73 36 4f 66 35 70 73 53 6f 42 5a 53 72 72 4b 32 75 72 37 43 78 73 72 4f 30 74 62 61 33 75 4c 6d 36 43 52 41 46 32 4c 38 4f 46 51 72 50 72 73 58 47 78 38 6a 4a 79 73 76 4d 7a 63 37 50 30 4e 48 53 30 39 51 72 4b 53 54 79 32 54 41 75 4b 65 6e 49 33 2b 44 68 34 75 50 6b 35 65 62 6e 36 4f 6e 71 36 2b 7a 74 37 6a 77 36 51 44 67 69 52 42 44 32 52 45 4a 49 51 43 70 4d 43 75 67 41 41 51 49 44 42 41 55 47 42 77 67 4a 43 67 73 4d 44 51 34 50 55 32 42 65 61 47 46 6a 52 47 59 79 47 56 31 71 61 48 4a 72 62 55 35 77 4c 67 30 6b 4a 53 59 6e 4b 43 6b 71 4b 79 77 74 4c 69 38 77 4d 54 49 7a 65 59 65 49 68 6f 70 54 4f 6f 43 4f 6a 34 32 52 4b 6b 46 43 51 30 52 46 52 6b 64 49 53 55 70 4c 54 4b 70 70 4f 54 70 Data Ascii: kZLp1eeW3Orr6e3F6+Tuz+Ps6Of5psSoBZSrrK2ur7CxsrO0tba3uLm6CRAF2L8OFQrPrsXGx8jJysvMzc7P0NHS09QrKSTy2TAuKenI3+Dh4uPk5ebn6Onq6+zt7jw6QDgiRBD2REJIQCpMCugAAQIDBAUGBwgJCgsMDQ4PU2BeaGFjRGYyGV1qaHJrbU5wLg0kJSYnKCkqKywtLi8wMTIzeYeIhopTOoCOj42RKkFCQ0RFRkdISUpLTKppOTp
2024-12-17 10:51:28 UTC	1369	IN	Data Raw: 36 47 6e 34 65 44 77 30 65 66 73 35 61 6d 72 6a 61 53 6c 70 71 63 47 78 4a 53 72 72 4b 32 75 6d 62 43 78 73 72 50 7a 38 50 58 79 79 66 62 33 75 39 6d 39 78 51 38 58 35 50 48 70 31 4d 7a 68 73 63 6a 4a 79 73 73 50 49 42 51 52 48 4f 79 38 46 78 59 70 48 4e 63 75 4b 42 38 68 49 79 63 74 4a 53 58 37 34 69 4d 67 4a 53 4c 34 4a 69 66 71 43 65 7a 30 39 51 76 77 4e 45 55 35 4e 6b 45 53 34 54 77 37 54 6b 45 45 54 56 55 6a 4d 43 67 54 43 78 2f 76 42 77 67 4a 43 68 4e 53 59 6c 78 53 5a 46 70 68 59 52 77 65 46 6e 49 43 41 77 51 62 48 42 30 65 48 79 41 68 49 6e 6c 6c 64 79 5a 71 63 48 56 74 66 34 51 74 53 79 39 76 64 48 68 79 64 33 32 43 64 6e 75 4e 6b 6e 5a 37 67 49 52 2b 67 34 6d 4f 67 6f 65 5a 6e 6c 56 76 64 4a 32 58 6d 46 36 4c 61 6a 70 52 55 6c 4e 55 56 56 5a 58 Data Ascii: 6Gn4eDw0efs5amrjaSlpqcGxJSrrK2umbCxsrPz8PXyyfb3u9m9xQ8X5PHp1MzhscjJyssPIBQRHOy8FxYpHNcuKB8hIyctJSX74iMgJSL4JifqCez09QvwNEU5NkES4Tw7TkEETVUjMCgTCx/vBwgJChNSYlxSZFphYRweFnICAwQbHB0eHyAhInlldyZqcHVtf4QtSy9vdHhyd32CdnuNknZ7gIR+g4mOgoeZnlVvdJ2XmF6LajpRUlNUVVZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49740	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:30 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:30 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 10:51:30 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: BwjYwsrfJ29sDjgHFD6LMbxgeeMyKw2KSK4=$5Ka2R2RFzpICz+l/ cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f365bbc9dfcc448-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:30 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49741	104.18.94.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:35 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28671 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/zh6sw/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:35 UTC	16384	OUT	Data Raw: 76 5f 38 66 33 36 35 62 37 30 61 63 30 30 34 31 61 66 3d 55 35 73 58 45 4a 6d 51 68 4a 68 6a 35 65 51 48 31 6c 65 69 58 64 58 75 48 6d 4f 37 2d 65 44 58 67 73 37 46 65 2d 58 57 55 73 5a 4a 78 65 4c 58 59 35 37 4a 65 45 58 30 48 4a 6e 61 73 65 55 4a 65 6d 33 31 65 33 58 65 39 65 7a 59 6d 65 6d 67 75 71 59 35 58 65 49 58 4f 4f 65 35 6c 57 6d 30 4f 36 67 73 4a 46 65 64 5a 65 79 79 65 30 49 57 5a 65 6d 58 37 6a 77 67 57 4f 44 42 65 55 57 6d 6a 31 79 4c 37 42 6d 59 65 59 48 65 62 51 36 59 6d 72 6f 65 6d 63 4f 65 65 74 75 58 65 69 55 38 6e 65 4a 24 52 74 6f 6a 6c 79 50 6f 59 74 65 6d 6a 35 38 53 6f 31 39 41 4e 74 55 52 6c 77 66 43 58 59 50 41 73 5a 44 73 55 47 6d 65 6d 37 55 38 68 37 73 6c 5a 44 30 6d 4e 6c 25 32 62 52 7a 4c 4c 68 6d 55 75 2b 70 79 61 76 74 2d Data Ascii: v_8f365b70ac0041af=U5sXEJmQhJhj5eQH1leiXdXuHmO7-eDXgs7Fe-XWUsZJxeLXY57JeEX0HJnaseUJem31e3Xe9ezYmemguqY5XeIXOOe5lWm0O6gsJFedZeyye0IWZemX7jwgWODBeUWmj1yL7BmYeYHebQ6YmroemcOeetuXeiU8neJ$RtojlyPoYtemj58So19ANtURlwfCXYPAsZDsUGmem7U8h7slZD0mNl%2bRzLLhmUu+pyavt-
2024-12-17 10:51:35 UTC	12287	OUT	Data Raw: 42 6d 32 65 6c 65 7a 72 44 65 73 57 4a 68 75 36 65 42 65 43 5a 65 53 43 41 37 57 61 2b 54 61 72 4f 65 6d 50 6d 48 65 41 65 75 57 6d 56 65 50 51 62 57 68 78 65 55 58 65 31 65 5a 47 61 68 65 31 6d 77 4f 7a 65 6d 4f 65 37 65 61 65 59 4d 65 52 65 7a 58 61 39 6d 6d 65 31 57 4a 42 6d 4e 65 79 49 75 31 65 36 65 43 57 4f 39 6d 50 65 57 5a 6d 6a 65 68 65 56 5a 75 6a 65 74 65 66 5a 75 51 6d 62 65 67 58 37 73 65 54 65 4f 58 4a 6e 6d 36 65 4f 6e 6d 65 65 73 78 2d 68 4f 6f 48 67 57 6f 58 37 4a 65 5a 65 65 64 71 35 65 6a 65 67 57 59 74 58 77 57 30 65 4a 51 6d 53 65 77 48 59 5a 58 37 65 77 48 65 6e 65 42 65 65 5a 75 41 65 61 65 50 76 4f 68 6d 4f 39 77 48 61 46 6d 48 58 41 36 4c 78 57 67 65 67 51 37 5a 6d 4d 65 56 57 4a 4f 6d 7a 65 4f 58 61 41 6d 68 65 76 65 4a 39 65 51 Data Ascii: Bm2elezrDesWJhu6eBeCZeSCA7Wa+TarOemPmHeAeuWmVePQbWhxeUXe1eZGahe1mwOzemOe7eaeYMeRezXa9mme1WJBmNeyIu1e6eCWO9mPeWZmjeheVZujetefZuQmbegX7seTeOXJnm6eOnmeesx-hOoHgWoX7JeZeedq5ejegWYtXwW0eJQmSewHYZX7ewHeneBeeZuAeaePvOhmO9wHaFmHXA6LxWgegQ7ZmMeVWJOmzeOXaAmheveJ9eQ
2024-12-17 10:51:36 UTC	1343	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4084 Connection: close cf-chl-out: Qr1uBsTCfDr4hvVj7DDgf0B7Y6ttH6UDdnrzcEm4OokUeF2tfrrODjeDYqx93D7/qfPwVSdAPseK/+vojdsbdUy1AtlvJAabjEgLhfkl60WSgxhYqFSQ/CbR$xb64qY7xWf4+W4W6 cf-chl-out-s: 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$LAtsB [TRUNCATED] Server: cloudflare
2024-12-17 10:51:36 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 33 36 35 62 64 65 61 62 30 36 34 32 65 32 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8f365bdeab0642e2-EWRalt-svc: h3=":443"; ma=86400
2024-12-17 10:51:36 UTC	1333	IN	Data Raw: 75 36 36 30 71 37 66 41 65 4b 71 4a 73 38 4f 39 73 38 57 37 77 73 4a 39 66 39 4c 56 6c 48 72 53 78 63 76 43 7a 74 65 50 77 62 36 55 77 71 4f 4f 79 5a 43 6c 69 2b 50 57 33 4e 50 66 36 4b 44 53 7a 36 62 54 74 4a 2f 62 6f 62 62 7a 35 75 7a 6a 37 2f 69 77 39 76 54 38 79 37 36 6f 78 71 72 78 41 76 76 78 42 50 6b 42 41 62 75 39 74 52 4b 68 75 4c 6d 36 75 78 51 48 44 51 51 51 47 64 41 63 35 52 63 59 46 64 37 4a 35 38 73 68 49 43 51 56 36 37 76 53 30 39 54 56 4c 69 45 6e 48 69 6f 7a 36 69 49 6f 4e 77 34 35 2b 75 4d 43 35 54 73 36 50 69 38 47 31 65 7a 74 37 75 39 49 4f 30 45 34 52 45 30 46 54 68 35 4f 51 42 41 4c 51 55 67 6e 4e 68 4d 4c 44 53 44 76 42 77 67 4a 43 6d 4a 56 57 31 4a 65 5a 78 39 6f 4f 47 68 61 4b 69 56 49 61 6c 78 71 51 44 55 6d 4b 44 73 4c 44 43 4d Data Ascii: u660q7fAeKqJs8O9s8W7wsJ9f9LVlHrSxcvCztePwb6UwqOOyZCli+PW3NPf6KDSz6bTtJ/bobbz5uzj7/iw9vT8y76oxqrxAvvxBPkBAbu9tRKhuLm6uxQHDQQQGdAc5RcYFd7J58shICQV67vS09TVLiEnHioz6iIoNw45+uMC5Ts6Pi8G1ezt7u9IO0E4RE0FTh5OQBALQUgnNhMLDSDvBwgJCmJVW1JeZx9oOGhaKiVIalxqQDUmKDsLDCM
2024-12-17 10:51:36 UTC	1369	IN	Data Raw: 5a 69 5a 64 6e 71 71 6f 5a 36 48 68 58 75 4f 63 62 43 33 75 4a 68 74 68 37 69 70 74 62 47 74 6a 4a 65 37 6e 6f 47 78 76 72 6d 41 79 5a 57 6d 67 35 71 64 6d 4c 61 37 6a 71 36 51 70 61 33 52 79 4d 71 37 30 64 61 58 71 4c 32 32 6e 64 62 43 79 75 57 66 30 37 65 6c 34 74 72 61 37 63 54 6c 30 4c 48 73 38 71 32 2f 35 63 6d 79 73 63 7a 34 37 65 58 49 7a 38 33 36 7a 76 7a 4f 7a 64 76 48 35 41 62 34 34 64 66 4d 35 77 37 4e 30 64 73 52 33 77 6e 70 46 68 55 4d 43 4f 6b 59 47 78 72 65 38 50 33 37 34 42 38 6c 43 50 45 48 42 74 34 57 36 52 37 37 43 68 33 72 36 77 45 6d 4a 51 67 68 45 78 41 6d 4d 43 34 32 48 53 41 67 49 30 45 4d 42 43 55 62 50 51 4d 62 4b 42 56 4b 53 78 63 67 4c 78 39 53 44 55 59 4b 57 43 70 48 4f 46 45 35 4d 31 38 76 57 6c 39 65 58 6c 45 34 5a 54 6b 6b Data Ascii: ZiZdnqqoZ6HhXuOcbC3uJhth7iptbGtjJe7noGxvrmAyZWmg5qdmLa7jq6Qpa3RyMq70daXqL22ndbCyuWf07el4tra7cTl0LHs8q2/5cmyscz47eXIz836zvzOzdvH5Ab44dfM5w7N0dsR3wnpFhUMCOkYGxre8P374B8lCPEHBt4W6R77Ch3r6wEmJQghExAmMC42HSAgI0EMBCUbPQMbKBVKSxcgLx9SDUYKWCpHOFE5M18vWl9eXlE4ZTkk
2024-12-17 10:51:36 UTC	1369	IN	Data Raw: 2b 43 61 58 4b 73 6f 4a 32 6d 72 47 39 74 6c 4c 52 38 6c 48 70 38 72 37 53 4d 77 71 4b 53 75 72 53 5a 69 59 53 72 71 6f 61 74 67 38 47 5a 77 4d 58 48 30 4b 37 4e 75 61 61 6a 32 64 72 46 30 5a 79 7a 6c 64 6d 35 72 73 76 50 6f 74 6e 55 70 4f 4f 6f 33 4b 57 2b 76 76 43 79 34 65 48 77 79 65 79 78 7a 74 76 76 31 4e 6a 33 35 39 54 61 76 4f 2f 54 77 2f 76 58 77 41 49 4b 31 51 6a 39 79 66 67 46 45 68 50 79 33 75 72 54 41 4f 4d 59 32 75 6a 5a 36 65 66 54 36 64 6e 69 2f 42 34 43 46 76 6f 43 42 68 37 35 47 52 6f 49 2b 75 7a 77 4d 43 6a 6f 37 79 51 76 47 69 6b 54 4f 42 4d 4d 43 68 30 32 4c 41 35 43 2f 6a 45 69 42 6b 59 64 4a 7a 67 70 54 45 77 32 4b 51 31 4f 54 79 78 55 53 55 39 4a 4f 31 55 6e 47 46 34 6e 4f 68 55 39 57 6c 52 6c 4f 31 78 53 5a 30 6c 5a 4a 57 52 6a 59 Data Ascii: +CaXKsoJ2mrG9tlLR8lHp8r7SMwqKSurSZiYSrqoatg8GZwMXH0K7Nuaaj2drF0Zyzldm5rsvPotnUpOOo3KW+vvCy4eHwyeyxztvv1Nj359TavO/Tw/vXwAIK1Qj9yfgFEhPy3urTAOMY2ujZ6efT6dni/B4CFvoCBh75GRoI+uzwMCjo7yQvGikTOBMMCh02LA5C/jEiBkYdJzgpTEw2KQ1OTyxUSU9JO1UnGF4nOhU9WlRlO1xSZ0lZJWRjY
2024-12-17 10:51:36 UTC	13	IN	Data Raw: 74 74 59 52 33 61 57 74 2b 54 73 49 3d Data Ascii: ttYR3aWt+TsI=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49743	104.18.95.41	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:37 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/702965071:1734431245:bQlVmQlTgCdwkKk01I2-LqRzpwrtHzGD_Y_it20IMyI/8f365b70ac0041af/y.rari8uCb5PjabU5mvK.IUrB4gy5VHGLj4EYAvlZcg-1734432678-1.1.1.1-fyMfEtlXSdza88aNApE7NcTBfXZKg9fGhdz9uXO0l7ByHIENimTYq3J0dZKAZUym HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:38 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 10:51:38 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Pg2QUO9r7M9LxYK/w43q6gobCZ0haQRmCy4=$kkDEUsx+nk78izHZ Server: cloudflare CF-RAY: 8f365beb4916c434-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:38 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49744	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:39 UTC	1311	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1 Host: alluc.co Connection: keep-alive Content-Length: 6257 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" CF-Chl-RetryAttempt: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP sec-ch-ua-platform: "Windows" Accept: / Origin: https://alluc.co Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:39 UTC	6257	OUT	Data Raw: 76 5f 38 66 33 36 35 62 33 64 64 61 65 31 34 32 61 31 3d 4e 65 73 31 74 71 68 4b 76 71 76 38 65 6b 4b 36 24 41 6b 4b 31 79 31 62 73 71 24 43 4a 6b 42 6b 4e 36 79 65 68 25 32 62 6b 73 75 64 43 36 71 41 6b 43 6b 6a 6e 31 6b 50 73 6b 51 31 4e 73 43 58 6b 4f 31 71 32 64 64 6b 78 6e 71 46 4b 59 41 6b 43 6d 6b 64 64 43 41 6b 61 2d 63 43 24 2b 6b 4f 6e 36 6b 6e 31 4f 55 36 6c 43 6b 51 67 6b 55 35 6e 43 55 34 6b 6b 58 6f 6b 42 31 6b 34 2b 2b 77 74 6b 6b 6f 4e 63 79 44 58 4f 6b 49 68 56 76 6e 6b 34 42 6e 6b 64 31 71 63 74 73 6e 6b 52 31 71 2b 6b 73 6f 46 6c 71 6d 6f 6b 68 36 6b 48 67 36 6e 53 71 70 6e 24 75 47 47 6b 6a 45 37 2d 49 41 46 24 6d 68 61 35 46 76 4f 45 4e 45 6f 61 6b 68 58 6f 70 6b 36 72 47 4f 6b 59 31 6b 4a 6c 4f 6a 50 6b 51 64 4f 2b 74 48 68 62 4f 64 Data Ascii: v_8f365b3ddae142a1=Nes1tqhKvqv8ekK6$AkK1y1bsq$CJkBkN6yeh%2bksudC6qAkCkjn1kPskQ1NsCXkO1q2ddkxnqFKYAkCmkddCAka-cC$+kOn6kn1OU6lCkQgkU5nCU4kkXokB1k4++wtkkoNcyDXOkIhVvnk4Bnkd1qctsnkR1q+ksoFlqmokh6kHg6nSqpn$uGGkjE7-IAF$mha5FvOENEoakhXopk6rGOkY1kJlOjPkQdO+tHhbOd
2024-12-17 10:51:39 UTC	1328	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4016 Connection: close cf-chl-out-s: c1SZ2tV41OvytBIU7F4k663eBUIolIHNW3uVovgW1P1sjc2/ErIf/rjwkOqQ3/41lQJ9prZgDHetrYwSuMIJ7rD8zHuAVK1K8VVaZvLRKhLTkKv5I5EFoovTmGg2yH17FTD9PHAN84MBBu7MVnWIaIR32hARobV5icucLYgZ0/dNGftYUxdWdB/aHW65DM/eIx5kmjaH9Q5/a0fytCotHZjBvxE4ONxaCLwzooY1ktbkCrfL233M0U8gHF4bqjEJteOjMF2sClstGaUhN3Tum07+RNubhZnCoi2Fu6tHnmAkx1WOu8octhsl9za5CiS9UOBme8z+Oux6WZkQ7frvdHHPiX25qlmUR6afxQv2/kWy6EpnfMs7hlcfjD0CB9k7GFaAKTkumCG8Lq2I5JpxE9JKHrrrVops9Fb+nTabivKAWOA50nFa6SsGrGe+/kyvkDo9esLtb4WtZfuvx+MfD+JCxRiaFmQqrmHes7PCjQQ+0OzRq5axzZpMXn4GQuv4CMpy6rS/E1Zwv7pTltGPkVXOdd9s8nz6+h4ocEynRQ==$ntKEzbT9g5tLh0SB cf-chl-out: CTWZFDvh5LEom53QyouBrRysrKQGNenTUZLl2dSUp2R96nkZ4QaOULxUeRD0RLEBEjnE3WlDIYlTMGUPduvq9mkvkdza$9WaZWLI/kk8wNaun set-cookie: cf_chl_rc_m=;Expires=Mon, 16 Dec 2024 10:51:39 GMT;SameSite=Strict Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ccVVzXzwQ%2FgH7PdBtJDBaVebxVQw2FXuBk8yhsEo85PEfmI2%2BzWW%2F4Bj3o5gkuzHRgjXnFyGlPq1TqR%2BmsEgRuAvjja5itKL7pacqs889W0ygOY6ocg7zGEYWw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365bf20a2dc342-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 10:51:39 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 31 36 26 6d 69 6e 5f 72 74 74 3d 31 35 31 33 26 72 74 74 5f 76 61 72 3d 35 37 34 26 73 65 6e 74 3d 39 26 72 65 63 76 3d 31 34 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 31 36 26 72 65 63 76 5f 62 79 74 65 73 3d 38 31 39 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 39 36 31 30 33 26 63 77 6e 64 3d 31 36 30 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 66 35 34 61 34 66 35 62 31 66 34 36 35 34 31 26 74 73 3d 34 37 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1513&rtt_var=574&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2816&recv_bytes=8190&delivery_rate=1896103&cwnd=160&unsent_bytes=0&cid=df54a4f5b1f46541&ts=479&x=0"
2024-12-17 10:51:39 UTC	1193	IN	Data Raw: 69 6e 32 44 65 6f 61 50 52 33 6c 59 67 70 4b 4d 67 70 53 4b 6b 5a 46 4d 54 71 47 6b 59 30 6d 68 6c 4a 71 52 6e 61 5a 65 6b 49 31 6a 6b 58 4a 64 6d 46 39 30 57 72 4b 6c 71 36 4b 75 74 32 2b 68 6e 6e 57 69 67 32 36 71 63 49 57 78 77 62 75 78 77 37 6e 41 77 48 4f 37 75 73 71 70 76 63 33 4d 31 4a 2f 4d 7a 63 72 4a 78 72 44 45 30 63 71 4f 6b 49 6a 6b 64 49 75 4d 6a 59 37 69 35 39 72 6d 31 74 79 56 6e 75 37 68 35 39 37 71 38 39 69 6c 33 75 50 6e 34 65 62 73 38 65 58 32 2b 50 32 78 36 4f 65 30 38 65 4d 4b 41 76 65 36 38 62 36 32 45 36 4b 35 75 72 75 38 76 62 36 2f 77 41 55 45 46 77 72 46 7a 52 45 58 48 68 41 65 44 68 45 6a 47 53 63 58 32 65 32 2b 31 64 62 58 32 4e 6e 61 32 39 7a 64 33 74 2f 67 4e 43 67 34 4f 6a 67 31 35 2b 38 74 4d 53 73 77 4e 6a 73 76 51 7a 55 Data Ascii: in2DeoaPR3lYgpKMgpSKkZFMTqGkY0mhlJqRnaZekI1jkXJdmF90WrKlq6Kut2+hnnWig26qcIWxwbuxw7nAwHO7usqpvc3M1J/MzcrJxrDE0cqOkIjkdIuMjY7i59rm1tyVnu7h597q89il3uPn4ebs8eX2+P2x6Oe08eMKAve68b62E6K5uru8vb6/wAUEFwrFzREXHhAeDhEjGScX2e2+1dbX2Nna29zd3t/gNCg4Ojg15+8tMSswNjsvQzU
2024-12-17 10:51:39 UTC	1369	IN	Data Raw: 4c 57 32 74 2f 34 4a 44 51 6e 68 43 73 77 54 42 68 62 6a 47 42 6b 59 45 41 6f 65 48 68 44 54 30 77 38 53 4a 42 6f 68 49 64 72 67 31 53 34 68 4a 78 34 71 4d 2b 6f 64 49 69 59 67 4a 53 73 77 4a 44 55 33 50 50 59 77 4c 50 51 49 31 2b 37 76 38 50 45 35 51 30 64 44 48 45 51 48 54 55 42 51 48 6c 4a 54 55 6b 70 45 57 46 68 4b 44 67 35 56 54 6c 35 54 57 31 45 56 47 78 41 59 51 6b 4a 48 53 52 30 67 4d 77 4d 61 47 78 77 64 5a 47 35 79 62 6b 64 76 4d 6e 68 72 65 30 6c 39 66 6e 31 31 62 34 4f 44 64 54 6b 35 65 49 4a 34 69 70 43 49 66 6b 46 48 50 45 52 2f 6a 35 43 4e 69 34 61 46 6d 59 2b 57 6c 6c 69 69 57 4b 4f 6b 70 56 79 57 6f 4b 53 67 59 61 71 6f 6f 35 32 6e 6e 61 71 67 6f 71 4a 6d 61 58 78 4d 54 57 52 6c 5a 6d 65 2b 71 72 78 72 75 62 4c 43 73 4c 53 79 78 72 53 5a Data Ascii: LW2t/4JDQnhCswTBhbjGBkYEAoeHhDT0w8SJBohIdrg1S4hJx4qM+odIiYgJSswJDU3PPYwLPQI1+7v8PE5Q0dDHEQHTUBQHlJTUkpEWFhKDg5VTl5TW1EVGxAYQkJHSR0gMwMaGxwdZG5ybkdvMnhre0l9fn11b4ODdTk5eIJ4ipCIfkFHPER/j5CNi4aFmY+WlliiWKOkpVyWoKSgYaqoo52nnaqgoqJmaXxMTWRlZme+qrxrubLCsLSyxrSZ
2024-12-17 10:51:39 UTC	1369	IN	Data Raw: 41 4a 79 78 49 46 46 65 49 58 47 42 63 50 43 52 30 64 44 39 4c 53 47 77 38 63 46 64 66 64 30 74 72 70 35 78 7a 77 47 75 76 72 48 2f 41 69 37 76 62 31 38 66 6e 36 2b 53 63 41 2b 53 37 2b 4c 6a 41 78 41 67 63 45 4e 41 55 31 44 41 77 38 44 7a 6f 2f 44 54 34 4f 51 68 4d 53 45 42 67 62 45 30 6f 56 48 78 67 65 54 53 4d 6a 48 56 4d 65 55 69 63 70 4b 69 52 56 48 42 38 79 41 68 6b 61 47 78 78 77 62 57 74 32 5a 6b 5a 6b 65 47 5a 61 64 6e 4e 75 65 46 42 34 4f 34 46 30 68 46 4b 47 68 34 5a 2b 65 49 79 4d 66 6b 4a 43 6b 6e 36 4b 6c 49 56 49 54 6b 4e 4c 69 57 70 79 57 5a 32 51 62 6e 39 38 66 71 43 47 5a 61 4e 70 65 71 6c 2f 68 57 2b 6f 68 4b 69 62 6c 70 4b 5a 69 4b 61 78 64 61 70 38 72 36 43 4a 74 38 53 66 6d 73 65 77 6d 48 32 43 69 59 61 49 69 59 6d 4a 6a 70 4b 54 69 Data Ascii: AJyxIFFeIXGBcPCR0dD9LSGw8cFdfd0trp5xzwGuvrH/Ai7vb18fn6+ScA+S7+LjAxAgcENAU1DAw8Dzo/DT4OQhMSEBgbE0oVHxgeTSMjHVMeUicpKiRVHB8yAhkaGxxwbWt2ZkZkeGZadnNueFB4O4F0hFKGh4Z+eIyMfkJCkn6KlIVITkNLiWpyWZ2Qbn98fqCGZaNpeql/hW+ohKiblpKZiKaxdap8r6CJt8SfmsewmH2CiYaIiYmJjpKTi
2024-12-17 10:51:39 UTC	85	IN	Data Raw: 61 30 52 33 6d 47 42 6b 57 33 38 72 6f 7a 43 49 68 4a 52 62 73 76 44 48 76 76 38 41 68 48 39 6e 69 4d 79 59 73 49 79 38 34 37 7a 73 46 4e 6a 63 30 2f 66 48 70 52 74 58 73 37 65 37 76 53 44 74 42 4f 45 52 4e 42 55 74 4a 55 53 41 54 42 51 63 61 36 56 37 72 Data Ascii: a0R3mGBkW38rozCIhJRbsvDHvv8AhH9niMyYsIy847zsFNjc0/fHpRtXs7e7vSDtBOERNBUtJUSATBQca6V7r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49748	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:41 UTC	581	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/362299308:1734431138:o_BkBnnjwfMiaGXJ1Q-y_6A7U2RZaxbtKKL-M68pZk0/8f365b3ddae142a1/u9R9k9bAyKZxPjAf0MG8JpYjgbfoJNFsZm007xtdCXA-1734432670-1.2.1.1-VygQNL_0QqJJzzb5z6VbrRSLcGhzPaCoG6oxffq_a9BR88pQKqiU4.3s2qpXWGaP HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:42 UTC	912	IN	HTTP/1.1 404 Not Found Date: Tue, 17 Dec 2024 10:51:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: dj+nbXO2rXsVA2oxdWluKbUk6+affge1Bh4=$Cq80rnNj78+Yz7Zq cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zww8usHCzOLG%2Fc8%2B5HbyL58%2BKYLUX2pBu0CUAn292wy1w3WZm65K4k11QoXmN5qPoerw1EmVEFPw8qK5s7Jc9p0SfALPco83YiaM82C2fgg35TbWHqiI1T2GvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c04fe077c9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1883&min_rtt=1845&rtt_var=719&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1159&delivery_rate=1582655&cwnd=189&unsent_bytes=0&cid=6b45d9b1d00baa97&ts=453&x=0"
2024-12-17 10:51:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49749	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:41 UTC	1237	OUT	POST /watch-movies/passengers.html HTTP/1.1 Host: alluc.co Connection: keep-alive Content-Length: 6062 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://alluc.co Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://alluc.co/watch-movies/passengers.html?__cf_chl_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:41 UTC	6062	OUT	Data Raw: 64 38 63 66 39 62 37 34 31 61 31 65 64 62 31 38 35 34 38 64 36 32 63 35 38 36 65 38 62 34 63 66 63 31 34 61 30 38 34 61 35 32 61 30 33 37 65 39 31 65 30 34 65 30 36 63 30 66 65 32 63 63 38 36 3d 38 7a 6e 2e 4b 6e 4e 6d 6d 71 5f 45 6f 4a 64 41 47 5a 54 52 56 4a 62 4e 77 76 32 53 4b 6c 36 4a 35 4e 79 54 34 4a 37 44 68 36 41 2d 31 37 33 34 34 33 32 36 37 30 2d 31 2e 32 2e 31 2e 31 2d 73 64 4a 46 70 53 66 42 77 48 49 62 55 42 67 4e 65 37 70 35 64 53 6a 4d 52 6e 5f 47 7a 50 46 6b 57 31 6e 68 50 31 45 69 69 70 2e 67 56 32 42 63 33 58 36 49 75 4d 70 6c 4e 76 33 42 31 68 77 30 52 7a 6d 6e 61 44 54 76 77 38 32 38 54 4e 54 43 63 46 7a 5f 37 4a 31 63 67 71 45 76 6d 63 35 68 58 6c 61 37 76 42 57 47 67 74 45 76 32 4c 77 76 46 79 6b 53 78 42 54 32 66 30 70 66 47 75 6f Data Ascii: d8cf9b741a1edb18548d62c586e8b4cfc14a084a52a037e91e04e06c0fe2cc86=8zn.KnNmmq_EoJdAGZTRVJbNwv2SKl6J5NyT4J7Dh6A-1734432670-1.2.1.1-sdJFpSfBwHIbUBgNe7p5dSjMRn_GzPFkW1nhP1Eiip.gV2Bc3X6IuMplNv3B1hw0RzmnaDTvw828TNTCcFz_7J1cgqEvmc5hXla7vBWGgtEv2LwvFykSxBT2f0pfGuo
2024-12-17 10:51:43 UTC	1342	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.alluc.co; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M; Path=/; Expires=Wed, 17-Dec-25 10:51:42 GMT; Domain=.alluc.co; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned X-Powered-By: PHP/7.4.1 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F2iyiMjq85yrl8SM36%2Bwk5KaFB5SUpluHAfLFwCY5bXlG1mkcma5FsjuW2gjxyseGhWRpAHhqJj9F%2BH8pgK597fX%2B4JAP3C4fMpqA4JxvpdOUbHbGBN6eEx8sw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c045ee27cf4-EWR
2024-12-17 10:51:43 UTC	248	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 32 37 26 6d 69 6e 5f 72 74 74 3d 32 30 32 31 26 72 74 74 5f 76 61 72 3d 37 37 31 26 73 65 6e 74 3d 37 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 31 36 26 72 65 63 76 5f 62 79 74 65 73 3d 37 39 32 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 34 30 37 39 30 37 26 63 77 6e 64 3d 32 31 34 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 66 61 31 65 38 35 64 66 65 33 36 64 33 30 66 26 74 73 3d 31 34 34 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2027&min_rtt=2021&rtt_var=771&sent=7&recv=12&lost=0&retrans=0&sent_bytes=2816&recv_bytes=7921&delivery_rate=1407907&cwnd=214&unsent_bytes=0&cid=8fa1e85dfe36d30f&ts=1448&x=0"
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 31 65 63 38 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 20 3d 20 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 61 74 63 68 20 50 61 73 73 65 6e 67 65 72 73 20 4f 6e 6c 69 6e 65 20 46 72 Data Ascii: 1ec8<html lang = "en" xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name=viewport content="width=device-width, initial-scale=1"> <title>Watch Passengers Online Fr
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6a 71 75 65 72 79 2e 63 6c 75 65 74 69 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6a 71 75 65 72 79 2e 71 74 69 70 2e 6d 69 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 75 73 74 6f 6d 2e 63 73 73 3f 76 3d 31 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 Data Ascii: stylesheet" href="/css/jquery.cluetip.css" type="text/css" /> <link rel="stylesheet" href="/css/jquery.qtip.min.css" type="text/css" /> <link rel="stylesheet" href="/css/custom.css?v=1.1" type="text/css" /> <link rel="stylesheet" href="/css
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 72 65 6f 72 64 65 72 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 65 61 72 63 68 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 73 65 61 72 63 68 22 3e 3c 2f 69 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 65 6e 75 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 74 6f 70 2d 6d 65 6e 75 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 75 63 2e 63 Data Ascii: ><i class="fa fa-reorder"></i></div> <div class="mobile-search"><i class="fa fa-search"></i></div> <div id="menu"> <ul class="top-menu"> <li> <a href="https://alluc.c
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 61 63 74 69 6f 6e 2e 68 74 6d 6c 22 3e 41 63 74 69 6f 6e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: class="sub-menu"> <li> <a href="/genre/action.html">Action</a> </li>
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 74 76 2d 73 68 6f 77 73 2d 62 79 2d 67 65 6e 72 65 2e 68 74 6d 6c 22 3e 42 72 6f 77 73 65 20 54 56 20 53 68 6f 77 73 20 62 79 20 47 65 6e 72 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 63 6f 6d 65 64 79 2e 68 74 6d 6c 22 3e 43 6f 6d 65 64 79 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 Data Ascii: tv-shows-by-genre.html">Browse TV Shows by Genre</a> </li> <li> <a href="/genre/comedy.html">Comedy</a> </li>
2024-12-17 10:51:43 UTC	1043	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 68 69 73 74 6f 72 79 2e 68 74 6d 6c 22 3e 48 69 73 74 6f 72 79 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </li> <li> <a href="/genre/history.html">History</a> </li> <li>
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 33 63 30 33 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 6e 2d 61 2e 68 74 6d 6c 22 3e 6e 2f 41 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 6e 65 77 73 2e 68 74 6d 6c 22 3e 4e 65 77 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3c03 <a href="/genre/n-a.html">n/A</a> </li> <li> <a href="/genre/news.html">News</a>
2024-12-17 10:51:43 UTC	1369	IN	Data Raw: 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 73 68 6f 72 74 2e 68 74 6d 6c 22 3e 53 68 6f 72 74 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 67 65 6e 72 65 2f 73 6f 61 70 2e 68 74 6d 6c 22 3e 53 6f 61 70 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="/genre/short.html">Short</a> </li> <li> <a href="/genre/soap.html">Soap</a> </li>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49750	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:41 UTC	980	OUT	GET / HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html?__cf_chl_tk=hEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:42 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:42 UTC	899	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4f 2b 44 54 33 37 44 77 53 74 35 47 62 54 2f 4f 79 6e 43 53 66 4d 51 72 2f 6c 43 38 2f 4c 78 77 79 37 53 31 4e 64 4c 56 4c 76 45 6b 52 4d 31 54 66 39 7a 32 78 68 47 6b 52 39 6d 4e 37 39 51 52 56 30 46 44 6a 49 39 51 4e 41 56 67 77 42 4c 65 43 4a 42 30 30 79 39 4f 45 34 67 62 54 33 36 6c 42 57 35 64 62 4d 44 33 4c 6b 77 3d 24 4e 58 6e 4b 79 5a 56 43 4d 38 48 51 67 46 43 5a 52 49 5a 43 52 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: O+DT37DwSt5GbT/OynCSfMQr/lC8/Lxwy7S1NdLVLvEkRM1Tf9z2xhGkR9mN79QRV0FDjI9QNAVgwBLeCJB00y9OE4gbT36lBW5dbMD3Lkw=$NXnKyZVCM8HQgFCZRIZCRQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 32 33 62 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 23b0<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 72 50 63 4a 46 62 4d 54 52 6a 68 38 6a 35 61 67 78 33 75 54 47 70 68 35 6f 43 39 37 72 70 59 77 56 61 65 32 4a 76 32 76 59 41 66 4a 5f 56 4f 62 6b 66 36 5f 2e 6c 34 58 6a 6e 59 4f 75 72 58 6d 6c 65 47 48 76 52 36 48 61 77 64 4e 58 37 35 73 48 6b 42 36 4d 4f 71 49 35 6c 48 67 33 47 73 50 4e 73 63 67 55 5f 34 30 43 66 47 41 31 38 2e 76 52 7a 38 58 38 79 6a 49 33 4e 54 73 55 64 77 72 41 61 36 7a 42 76 74 70 2e 43 4b 41 6d 72 71 61 58 79 61 74 48 66 4a 5a 33 6e 4d 65 44 42 50 47 4c 4c 55 6b 59 34 79 64 6f 33 6d 50 64 55 34 72 6e 47 62 42 41 5a 51 56 4b 43 4d 39 36 52 44 38 58 41 37 49 5a 49 42 51 79 37 74 6f 2e 5f 57 74 6d 44 39 37 79 51 32 6c 56 57 56 6f 48 7a 6b 33 64 31 56 57 7a 57 35 5a 6f 42 71 31 70 78 76 63 75 33 30 2e 62 31 67 57 45 73 76 53 41 53 6c Data Ascii: rPcJFbMTRjh8j5agx3uTGph5oC97rpYwVae2Jv2vYAfJ_VObkf6_.l4XjnYOurXmleGHvR6HawdNX75sHkB6MOqI5lHg3GsPNscgU_40CfGA18.vRz8X8yjI3NTsUdwrAa6zBvtp.CKAmrqaXyatHfJZ3nMeDBPGLLUkY4ydo3mPdU4rnGbBAZQVKCM96RD8XA7IZIBQy7to._WtmD97yQ2lVWVoHzk3d1VWzW5ZoBq1pxvcu30.b1gWEsvSASl
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 6e 46 49 6e 59 37 6f 44 6d 66 62 4d 64 71 6e 71 37 31 36 75 74 62 58 63 64 7a 47 62 4d 41 4c 52 5a 63 71 78 6f 44 61 76 52 46 57 39 5f 48 61 73 79 41 30 4f 41 50 75 68 4d 31 57 42 59 52 4a 5a 64 33 37 4d 62 53 45 73 31 32 30 64 51 46 63 30 55 68 5f 30 71 33 63 6e 79 4e 5a 5a 6a 51 69 4f 54 30 61 63 52 67 52 50 32 36 63 38 43 50 2e 53 52 71 74 69 43 65 58 52 56 73 62 45 67 68 7a 64 49 61 48 73 6c 4a 59 6f 77 63 77 36 56 6c 58 54 63 54 68 32 65 38 4b 63 49 71 73 30 56 66 30 38 32 4f 6f 59 4c 6c 43 4c 51 68 62 5a 57 55 6a 55 38 77 30 61 4e 74 54 52 7a 44 64 73 47 57 72 58 53 34 78 35 68 44 6f 67 61 68 2e 78 71 69 57 6c 55 72 6e 71 4c 76 70 77 69 6d 5a 47 35 30 4e 58 39 30 57 78 5f 54 5f 4f 47 62 71 55 66 5f 6f 52 56 39 73 67 70 58 6f 30 66 4f 48 73 62 6b 41 Data Ascii: nFInY7oDmfbMdqnq716utbXcdzGbMALRZcqxoDavRFW9_HasyA0OAPuhM1WBYRJZd37MbSEs120dQFc0Uh_0q3cnyNZZjQiOT0acRgRP26c8CP.SRqtiCeXRVsbEghzdIaHslJYowcw6VlXTcTh2e8KcIqs0Vf082OoYLlCLQhbZWUjU8w0aNtTRzDdsGWrXS4x5hDogah.xqiWlUrnqLvpwimZG50NX90Wx_T_OGbqUf_oRV9sgpXo0fOHsbkA
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 31 43 58 56 6a 74 6d 77 76 46 63 33 7a 68 6c 62 36 41 44 45 79 32 35 56 63 76 32 31 7a 6b 77 46 5a 57 36 4f 61 6f 79 6e 56 44 52 4f 76 4d 52 73 4e 34 4e 48 55 51 67 76 4e 2e 70 6c 56 6d 61 41 65 70 74 70 46 34 4d 6f 49 4d 65 4b 6a 4d 77 48 66 52 2e 35 73 44 75 42 77 74 75 55 4e 75 78 4c 6c 36 53 63 77 6e 58 4d 78 63 59 35 4a 36 62 62 65 78 56 6a 66 57 5f 43 32 61 77 76 34 6d 59 7a 68 68 54 6f 48 77 54 79 30 57 35 38 31 6d 43 7a 34 71 52 53 58 64 32 45 53 79 52 53 65 63 41 51 31 48 68 39 5f 69 47 55 5a 32 6a 32 54 56 56 51 71 66 44 59 48 51 54 2e 6f 6b 48 6d 32 44 5f 36 59 36 63 74 4b 65 6b 5a 74 73 36 74 37 42 34 5f 50 38 4b 61 55 38 78 6a 32 73 5a 4a 70 64 71 64 44 72 68 6f 52 6d 2e 73 6e 4f 30 5f 73 74 70 31 41 53 36 52 69 51 74 56 75 64 55 6b 78 46 6e Data Ascii: 1CXVjtmwvFc3zhlb6ADEy25Vcv21zkwFZW6OaoynVDROvMRsN4NHUQgvN.plVmaAeptpF4MoIMeKjMwHfR.5sDuBwtuUNuxLl6ScwnXMxcY5J6bbexVjfW_C2awv4mYzhhToHwTy0W581mCz4qRSXd2ESyRSecAQ1Hh9_iGUZ2j2TVVQqfDYHQT.okHm2D_6Y6ctKekZts6t7B4_P8KaU8xj2sZJpdqdDrhoRm.snO0_stp1AS6RiQtVudUkxFn
2024-12-17 10:51:42 UTC	1369	IN	Data Raw: 6e 74 74 79 55 52 37 38 78 63 56 67 69 78 63 5f 36 7a 65 41 51 74 47 33 57 72 73 5f 56 50 31 69 50 74 59 50 2e 5a 67 62 6a 49 75 6d 53 35 2e 44 4a 65 32 53 50 79 74 67 6b 63 48 78 6f 38 52 37 2e 70 72 32 30 50 70 71 56 74 5a 73 49 56 42 6d 6e 67 49 4c 61 72 52 4a 67 6e 31 55 4c 74 4b 53 4a 68 67 35 77 6f 4d 5f 5f 5a 71 30 6b 67 6c 45 54 4c 37 46 61 6e 6c 63 53 74 51 37 43 4f 6d 33 4a 39 6c 33 71 4f 4f 37 75 53 4c 64 75 74 77 53 33 6d 47 45 31 4d 4d 47 53 74 7a 74 41 47 66 6f 34 36 6f 47 4b 72 37 6f 68 49 44 78 61 58 55 6c 53 44 54 77 33 4e 49 41 49 65 32 56 53 51 6d 4d 4e 61 67 76 2e 78 58 71 4d 35 65 49 58 79 6e 30 65 54 6f 53 64 66 50 74 69 36 2e 4d 52 47 34 64 67 35 58 48 65 34 63 7a 46 53 76 64 44 63 79 56 51 52 71 43 47 33 5a 30 35 42 66 75 53 47 52 Data Ascii: nttyUR78xcVgixc_6zeAQtG3Wrs_VP1iPtYP.ZgbjIumS5.DJe2SPytgkcHxo8R7.pr20PpqVtZsIVBmngILarRJgn1ULtKSJhg5woM__Zq0kglETL7FanlcStQ7COm3J9l3qOO7uSLdutwS3mGE1MMGStztAGfo46oGKr7ohIDxaXUlSDTw3NIAIe2VSQmMNagv.xXqM5eIXyn0eToSdfPti6.MRG4dg5XHe4czFSvdDcyVQRqCG3Z05BfuSGR
2024-12-17 10:51:42 UTC	930	IN	Data Raw: 65 56 37 77 6b 34 62 75 72 2e 37 6a 43 66 50 38 7a 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 66 33 36 35 63 30 35 30 38 66 37 66 35 66 61 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f Data Ascii: eV7wk4bur.7jCfP8z"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8f365c0508f7f5fa';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : locatio
2024-12-17 10:51:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49757	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:45 UTC	1341	OUT	GET /css/style.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	899	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 6004 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:04 GMT ETag: "1774-59c31569ccb00" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLANKpmZW41hZWxWWyaQ6Z%2BYdtCSw58HXm%2FkP%2FV2BbL%2BA9VMenoJE6vE0VUI8zrM7tZvuOKNc6%2Ffhx452%2FhwVAaiM2kgq07g9ExVojt3df3XG5iN1HYZWNsYvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1d5a67428f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1589&rtt_var=606&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1919&delivery_rate=1791411&cwnd=100&unsent_bytes=0&cid=f83e8764ad48a4ee&ts=451&x=0"
2024-12-17 10:51:46 UTC	470	IN	Data Raw: 2f 2a 53 69 64 65 20 42 61 72 2a 2f 0d 0a 23 73 69 64 65 62 61 72 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 77 69 64 74 68 3a 33 30 39 70 78 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 75 6c 20 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 2e 73 2d 69 6e 73 69 64 65 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 33 30 39 70 78 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 20 2e 73 69 64 65 62 61 72 74 69 74 6c 65 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 32 38 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 37 38 42 39 32 45 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 Data Ascii: /Side Bar/#sidebar{float:right;width:309px;}.sidebar{float: left;}.sidebar ul {list-style:none;}.sidebar .s-inside {float:left;width:309px;}.sidebar .sidebartitle{ height:28px; font-weight:bold; color:#78B92E;border-bottom:1px solid
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 30 20 30 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 2e 73 2d 69 6e 73 69 64 65 20 75 6c 20 6c 69 20 61 7b 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 37 38 42 39 32 45 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 2e 73 2d 69 6e 73 69 64 65 20 75 6c 20 6c 69 20 61 3a 68 6f 76 65 72 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 7d 0d 0a 2e 73 69 64 65 62 61 72 20 20 68 33 2e 74 69 74 6c 65 2d 6c 61 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 7d 0d 0a 73 6b 67 72 6f 75 6e 64 3a 23 46 46 46 46 30 30 7d 0d 0a 2e 73 69 64 65 62 61 72 20 20 2e 73 5f 63 6f 6e 74 65 6e 74 20 2e 74 Data Ascii: margin:5px 0 0 0;}.sidebar .s-inside ul li a{margin:5px 0 0 0;color:#78B92E;font-size:20px;text-decoration:none;}.sidebar .s-inside ul li a:hover{font-weight:bold;}.sidebar h3.title-last{background:none;}skground:#FFFF00}.sidebar .s_content .t
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 69 7a 65 3a 31 32 70 78 7d 0d 0a 0d 0a 2e 74 68 75 6d 62 63 6f 6e 74 65 6e 74 20 2e 62 6f 78 5f 69 6d 67 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 38 70 78 3b 7d 0d 0a 2e 74 68 75 6d 62 63 6f 6e 74 65 6e 74 20 2e 62 6f 78 5f 69 6d 67 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 20 68 65 69 67 68 74 3a 32 36 31 70 78 7d 0d 0a 2e 74 68 75 6d 62 63 6f 6e 74 65 6e 74 20 2e 62 6f 78 5f 69 6e 66 6f 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 38 70 78 20 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 63 6f 6c 6f 72 3a 23 64 64 66 37 66 65 3b 77 69 64 74 68 3a 31 30 31 36 70 78 3b 7d 0d 0a 2e 74 68 75 6d 62 63 6f 6e 74 65 6e 74 20 2e 62 6f 78 5f 69 Data Ascii: ize:12px}.thumbcontent .box_img{float:left;margin:8px;}.thumbcontent .box_img img{display:block;width:180px; height:261px}.thumbcontent .box_info{float:right;margin:5px 0 8px 8px;font-weight:bold; color:#ddf7fe;width:1016px;}.thumbcontent .box_i
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 46 39 36 32 32 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 37 31 41 32 31 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 45 70 69 73 6f 64 65 2a 2f 0d 0a 0d 0a 61 2e 65 70 69 73 6f 64 65 2c 20 61 2e 61 6c 6c 2d 63 61 74 65 67 6f 72 69 65 73 2d 61 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 70 78 20 73 6f 6c 69 64 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 37 31 41 32 31 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 37 38 42 39 32 45 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 Data Ascii: kground-color: #5F9622; color: #171A21;}/Episode/a.episode, a.all-categories-a { text-decoration: none; border: 0px solid; color: #171A21; background: #78B92E; border-radius: 30px; padding:10px; font-wei
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6f 66 2d 74 79 70 65 3a 68 6f 76 65 72 20 61 2c 20 2e 73 65 72 76 65 72 5f 6c 69 6e 65 2e 73 65 72 76 65 72 5f 70 6c 61 79 69 6e 67 20 70 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 20 61 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 22 2e 2e 2f 69 6d 67 2f 68 31 5f 74 69 74 6c 65 31 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 32 70 78 20 38 70 78 3b 0d 0a 7d 0d 0a 2e 73 65 72 76 65 72 5f 6c 69 6e 65 20 70 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 35 70 78 3b Data Ascii: of-type:hover a, .server_line.server_playing p:last-of-type a { color: #FFF !important; background: url("../img/h1_title1.png") no-repeat -2px 8px;}.server_line p { display: inline-block; margin-right: 20px; line-height: 35px;
2024-12-17 10:51:46 UTC	58	IN	Data Raw: 61 72 65 20 2e 73 68 61 72 65 54 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 63 32 66 66 3b 0d 0a 7d Data Ascii: are .shareTwitter:hover{ background-color:#21c2ff;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49759	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:45 UTC	1341	OUT	GET /css/reset.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	893	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 822 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:57 GMT ETag: "336-59c315631fb40" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3NNu00%2BVU%2F8n4drypthndztCPKAUpyuh5KkyEphJykCP1Gyp%2FTiG1aaHU5EeCwFUSKdvDhH9Exx6n8Iuwnr5qV6QdAcu63elz%2F1yO9EG5bKO67GAU3F6uqxadQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1d8a297c82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1788&rtt_var=679&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2814&recv_bytes=1919&delivery_rate=1601755&cwnd=212&unsent_bytes=0&cid=faef32d15932f203&ts=481&x=0"
2024-12-17 10:51:46 UTC	476	IN	Data Raw: ef bb bf 2f 2a 20 45 72 69 63 20 4d 65 79 65 72 27 73 20 52 65 73 65 74 20 43 53 53 20 76 32 2e 30 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 72 65 73 65 74 2e 63 6f 6d 20 2a 2f 0d 0a 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c Data Ascii: /* Eric Meyer's Reset CSS v2.0 - http://cssreset.com */html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,
2024-12-17 10:51:46 UTC	346	IN	Data Raw: 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 Data Ascii: r:0;font-size:100%;font:inherit;vertical-align:baseline;margin:0;padding:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,bloc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49758	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:45 UTC	1346	OUT	GET /css/styles_v80.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	899	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 94547 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:59 GMT ETag: "17153-59c3156507fc0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P2RdQoQ%2FG863DrZOyyXJAmAa4PSH20joImZ2iGVkB1n9fuVoI0UTbiDTDJcF61al6UP5ZMLpqK4Li2Ndy%2FkX%2BMV3bIbDhDYJX9%2BfUmEcnLPuQB63Bqq%2BtI9SHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1d8bd5c358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1474&min_rtt=1465&rtt_var=567&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1924&delivery_rate=1898569&cwnd=155&unsent_bytes=0&cid=aa0af4de9856c919&ts=474&x=0"
2024-12-17 10:51:46 UTC	470	IN	Data Raw: 62 6f 64 79 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 63 31 63 31 63 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 41 72 69 61 6c 22 3b 0a 7d 0a 2e 61 62 63 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 6d 2d 62 2d 34 30 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0a 7d 0a 2e 6d 2d 62 2d 33 30 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6d 2d 62 2d 32 30 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6d 2d 62 2d 35 20 7b 0a 20 20 20 Data Ascii: body{ background: #1c1c1c; font-family: "Arial";}.abc{ height: 150px; position: relative;}.m-b-40 { margin-bottom: 40px;}.m-b-30 { margin-bottom: 30px !important;}.m-b-20 { margin-bottom: 20px !important;}.m-b-5 {
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 70 2d 74 2d 35 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 2e 70 2d 62 2d 32 30 20 7b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 70 2d 6c 2d 31 30 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 2e 70 2d 6c 2d 32 32 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 77 2d 38 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 0a 7d 0a 2e 73 6c 69 64 65 5f 69 6d 67 5f 73 6d 61 6c 6c 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 33 34 70 78 3b 0a 7d 0a 2e 73 Data Ascii: { padding-top: 10px !important;}.p-t-5 { padding-top: 5px;}.p-b-20 {padding-bottom: 20px !important;}.p-l-10{ padding-left: 10px;}.p-l-22{ padding-left: 22px;}.w-80 { width: 80%}.slide_img_small { height: 134px;}.s
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 72 69 66 3b 0a 7d 0a 2e 4d 79 72 69 61 64 50 72 6f 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 79 72 69 61 64 50 72 6f 2d 52 65 67 75 6c 61 72 22 2c 20 22 41 72 69 61 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 2e 52 6f 74 6f 62 6f 74 68 69 6e 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 52 6f 62 6f 74 6f 2d 54 68 69 6e 22 2c 20 22 41 72 69 61 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 23 6c 6f 67 6f 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 7d 0a 23 6c 6f 67 6f 20 61 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 35 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 35 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 3b 0a 20 20 20 Data Ascii: rif;}.MyriadPro{ font-family: "MyriadPro-Regular", "Arial", sans-serif;}.Rotobothin{ font-family: "Roboto-Thin", "Arial", sans-serif;}#logo{ display: table;}#logo a{ height: 55px; line-height: 55px; display: table-cell;
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 23 77 72 61 70 5f 74 6f 70 5f 6d 65 6e 75 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 35 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 0a 7d 0a 0a 2e 74 6f 70 5f 6d 65 6e 75 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 35 35 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 35 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 Data Ascii: right: 10px; margin: auto;}#wrap_top_menu{ height: 65px; position: fixed; top: 0; left: 0; width: 100%; z-index: 999; background: rgba(0, 0, 0, 0.8);}.top_menu{ height: 55px; line-height: 55px; margin: 0;
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 75 5f 6c 69 73 74 5f 69 74 65 6d 20 2e 73 75 62 5f 6d 6f 72 65 20 3e 20 6c 69 20 3e 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 39 36 30 31 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 73 75 62 5f 6d 6f 72 65 2e 64 61 6e 65 74 20 61 3a 68 6f 76 65 72 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 38 62 66 34 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 73 75 62 5f 6d 6f 72 65 2e 64 61 6e 65 74 20 6c 69 2e 61 63 74 69 76 65 20 61 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 38 62 66 34 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 74 6f 70 5f 6d 65 6e 75 20 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 5f 69 74 65 6d 20 Data Ascii: u_list_item .sub_more > li > a:focus { color: #ff9601;outline: 0;}.sub_more.danet a:hover{ color: #88bf41 !important; outline: 0;}.sub_more.danet li.active a{ color: #88bf41 !important; outline: 0;}.top_menu .topmenu_list_item
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 2f 2a 20 46 69 72 65 66 6f 78 20 31 38 2d 20 2a 2f 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 65 61 72 63 68 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 2f 2a Data Ascii: -form .form-group input.form-control::-webkit-input-placeholder { display: none;}.search-form .form-group input.form-control:-moz-placeholder { /* Firefox 18- / display: none;}.search-form .form-group input.form-control::-moz-placeholder { /
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 36 64 36 39 36 34 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 36 64 36 39 36 34 3b 0a 7d 0a 2e 61 75 74 68 20 2e 70 72 6f 66 69 6c 65 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 36 64 36 39 36 34 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 34 70 78 3b 0a 7d 0a 2e 61 75 Data Ascii: epeat scroll 0 0; border-left: 1px solid #6d6964; border-right: 1px solid #6d6964;}.auth .profile li:first-child { border-top: 1px solid #6d6964; border-top-left-radius: 3px; border-top-right-radius: 3px; padding-top: 14px;}.au
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 78 3b 0a 7d 0a 2e 62 6f 78 5f 68 65 61 64 65 72 3a 68 6f 76 65 72 2c 20 2e 62 6f 78 5f 68 65 61 64 65 72 3a 66 6f 63 75 73 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 62 6f 78 5f 68 65 61 64 65 72 20 2e 62 74 6e 5f 61 72 72 6f 77 5f 72 69 67 68 74 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 39 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 5f 73 68 6f 77 5f 72 69 67 68 74 5f 63 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 Data Ascii: ; margin-bottom: 7px;margin-left: -15px;}.box_header:hover, .box_header:focus{ color: #fff;}.box_header .btn_arrow_right{ display: block; width: 24px; height: 29px; background: url('/images/icon_show_right_c.png') no-repeat c
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 68 69 64 64 65 6e 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 25 3b 0a 20 20 20 20 2f 2a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 20 31 70 78 20 23 43 33 43 33 42 39 20 73 6f 6c 69 64 3b 2a 2f 0a 7d 0a 0a 2f 2a 2e 73 6c 69 64 65 72 5f 65 76 65 6e 74 20 6c 69 2e 66 69 72 73 74 20 2e 77 72 61 70 5f 66 6c 61 67 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 7d 2a 2f 0a 2e 73 6c 69 64 65 72 5f 65 76 65 6e 74 20 6c 69 20 2e 68 6f 73 74 7b 0a 0a 7d 0a 2e 73 6c 69 64 65 72 5f 65 76 65 6e 74 20 6c 69 20 2e 61 77 61 79 7b 0a 0a 7d 0a 2e 73 6c 69 64 65 72 5f 65 76 65 6e 74 20 6c 69 20 2e 76 73 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 Data Ascii: hidden; padding: 0 2%; /border-left: 1px #C3C3B9 solid;/}/.slider_event li.first .wrap_flag{ border-left: none; border-top: none;}/.slider_event li .host{}.slider_event li .away{}.slider_event li .vs{ font-size: 30px;
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 61 6c 6c 5f 69 74 65 6d 5f 73 74 72 75 63 74 7b 0a 20 20 20 20 2f 2a 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 20 31 30 70 78 3b 2a 2f 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 33 33 76 77 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 33 34 76 77 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 73 6d 61 6c 6c 5f 69 74 65 6d 5f 73 74 72 75 63 74 5f 69 6d 67 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 33 33 76 77 3b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 33 34 76 77 3b 0a 7d 0a 2f 2a 65 6e 64 20 64 61 Data Ascii: all_item_struct{ /margin: 0 0 10px 10px;/ max-height: 233vw; max-width: 134vw; margin: 5px; padding: 5px; position: relative; overflow: hidden;}.small_item_struct_img{ max-width: 233vw; max-height: 134vw;}/*end da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49760	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:45 UTC	1349	OUT	GET /css/bootstrap.min.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	896	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 128474 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:59 GMT ETag: "1f5da-59c3156507fc0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2F7IVa8Z40U9U%2FA1q0ljgpYb9A3jhKxZbO4B9dq0lQXcoGK%2FUpWak0oNr0lLlS2tbltQRkwQnxhJxOQM7Zp5xw2QSet96xn323bEqzMG8P5XAHsZ1nkJWc2HVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1d8db24228-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2007&min_rtt=2000&rtt_var=764&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1927&delivery_rate=1418164&cwnd=205&unsent_bytes=0&cid=4821ddd146869ae4&ts=475&x=0"
2024-12-17 10:51:46 UTC	473	IN	Data Raw: 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 Data Ascii: html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;ver
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 6d 61 72 6b 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: n{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidd
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 20 32 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 73 69 6c 76 65 72 7d 6c 65 67 65 6e 64 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e Data Ascii: 2px;border:1px solid silver}legend{padding:0;border:0}textarea{overflow:auto}optgroup{font-weight:700}table{border-spacing:0;border-collapse:collapse}td,th{padding:0}@media print{*,:after,:before{color:#000!important;text-shadow:none!important;backgroun
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 33 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2f 63 73 73 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 33 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e Data Ascii: fontawesome-webfont.ttf?v=4.3.0') format('truetype'),url('/css/fonts/fontawesome-webfont.svg?v=4.3.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:in
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e Data Ascii: deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=1);-webkit-transform:rotate(90deg);-ms-transform:rotate(90deg);transform:rotate(90deg)}.
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 34 22 7d 2e 66 61 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 35 22 7d 2e 66 61 2d 73 74 61 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 36 22 7d 2e 66 61 2d 75 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 37 22 7d 2e 66 61 2d 66 69 6c 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: ic:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-heart:before{content:"\f004"}.fa-star:before{content:"\f005"}.fa-star-o:before{content:"\f006"}.fa-user:before{content:"\f007"}.fa-film:before{content:"\
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 61 2d 74 61 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 63 22 7d 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 64 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 65 22 7d 2e 66 61 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 66 22 7d 2e 66 61 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 Data Ascii: f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}.fa-tags:before{content:"\f02c"}.fa-book:before{content:"\f02d"}.fa-bookmark:before{content:"\f02e"}.fa-print:before{content:"\f02f"}.fa-camera:befor
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 31 22 7d 2e 66 61 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 34 22 7d 2e 66 61 2d 70 6c 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: -forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\f051"}.fa-eject:before{content:"\f052"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-plus-circle:before{conten
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 37 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 38 22 7d 2e 66 61 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 39 22 7d 2e 66 61 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 61 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: t:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{content:"\f077"}.fa-chevron-down:before{content:"\f078"}.fa-retweet:before{content:"\f079"}.fa-shopping-cart:before{content:"\f07a"}.fa-folder:before{cont
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 7d 2e 66 61 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 64 22 7d 2e 66 61 2d 72 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 65 22 7d 2e 66 61 2d 68 64 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 30 22 7d 2e 66 61 2d 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 31 22 7d 2e 66 61 2d 62 65 6c 6c 3a Data Ascii: re,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"}.fa-credit-card:before{content:"\f09d"}.fa-rss:before{content:"\f09e"}.fa-hdd-o:before{content:"\f0a0"}.fa-bullhorn:before{content:"\f0a1"}.fa-bell:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49761	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:45 UTC	1342	OUT	GET /css/app_v9.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	893	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 837 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:01 GMT ETag: "345-59c31566f0440" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agrov3aI38KFup9v3l4OeYrbvTL%2F0VwixYvWkTZb3gQwBmcsyfST9e6lii46xLG5p%2BIDH%2FS3op8iBz%2FfXnHbulHuoAnF0Oa9XyMs3Nti6FrXO1fbLq8uQaA8oQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1d8a228c89-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1760&rtt_var=674&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1920&delivery_rate=1606160&cwnd=202&unsent_bytes=0&cid=50dc364a91e62e29&ts=480&x=0"
2024-12-17 10:51:46 UTC	476	IN	Data Raw: 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 0a 2e 73 6c 69 64 65 72 20 2e 62 78 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 72 65 63 74 69 6f 6e 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 37 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 39 39 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 35 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 30 30 70 78 29 20 7b 20 0a 09 2e 73 6c 69 64 65 72 20 2e 62 78 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 72 65 63 74 69 6f 6e 7b 0a 09 09 77 69 64 74 68 3a 20 36 36 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 7d 0a 7d 0a Data Ascii: /* Slider */.slider .bx-controls-direction{position: absolute;background: rgba(0, 0, 0, 0.8);outline: 0;width: 70px;height: 99%;z-index: 15;}@media (min-width:1900px) { .slider .bx-controls-direction{width: 66px;height: 100%;}}
2024-12-17 10:51:46 UTC	361	IN	Data Raw: 6e 2d 6c 65 66 74 3a 20 31 30 25 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7d 0a 0a 2e 73 6c 69 64 65 72 20 2e 62 78 2d 6e 65 78 74 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 73 6c 69 64 65 72 20 2e 62 78 2d 70 72 65 76 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 39 30 30 70 78 29 20 7b 20 0a 09 2e 73 6c 69 64 65 72 20 2e 62 78 2d 70 72 65 76 7b 0a 09 09 77 69 64 74 68 3a 20 36 39 70 78 3b 0a 09 7d 0a 7d 0a 0a 0a 2e 69 74 65 6d 5f 73 6c 69 64 65 72 20 6c 69 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 Data Ascii: n-left: 10%; position: absolute;}.slider .bx-next { right: 10px;}.slider .bx-prev { left: 10px;}@media (min-width:1900px) { .slider .bx-prev{width: 69px;}}.item_slider li {-webkit-transition: all .4s ease-in-out;-moz-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49762	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:46 UTC	1346	OUT	GET /css/main.css?v=4.0 HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:46 UTC	899	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:46 GMT Content-Type: text/css Content-Length: 79203 Connection: close Last-Modified: Thu, 16 Jan 2020 09:42:10 GMT ETag: "13563-59c3ea3966080" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5492 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QrDXPWqoSvYl%2BXbWU8tkDs2iZUCXtq1VK6YweqVH%2FHdmh6YCNZU5OB9oeVKF2A%2FN1B1C%2Fz8I%2BChdcymfpl7rf5dGa6BqBAO2IN3XoJybTOTfLQ0B03WEBwKTLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c1f4e3642ce-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1728&rtt_var=836&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1924&delivery_rate=1689814&cwnd=233&unsent_bytes=0&cid=124ce7e159e6b4ab&ts=450&x=0"
2024-12-17 10:51:46 UTC	470	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 73 77 61 6c 64 7c 4d 6f 6e 74 73 65 72 72 61 74 3a 34 30 30 2c 37 30 30 29 3b 0a 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 20 75 72 6c 28 2f 69 6d 61 67 65 73 2f 62 67 2e 6a 70 67 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 6d 61 72 67 69 6e 3a 20 30 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 0a 68 31 2c 20 Data Ascii: @import url(http://fonts.googleapis.com/css?family=Oswald\|Montserrat:400,700);body {background: #FFF url(/images/bg.jpg);font-size: 14px; font-weight: normal; color: #333;margin: 0px;padding: 0px; -webkit-text-size-adjust: none; position: relative;}h1,
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 61 63 74 69 76 65 2c 20 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 7d 0a 2e 6d 74 35 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 6d 74 31 30 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 6d 74 32 30 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 6d 62 31 30 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 2e 6d 62 35 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 20 7d 0a 2e 6d 72 35 7b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 20 7d 0a 2e 6d 72 31 30 7b 20 6d 61 72 67 69 6e 2d 72 69 Data Ascii: active, a:focus{outline:none;}.mt5 {margin-top: 5px !important; }.mt10 {margin-top: 10px !important; }.mt20 {margin-top: 20px !important; }.mb10{ margin-bottom: 10px !important; }.mb5 {margin-bottom: 5px; }.mr5{ margin-right: 5px; }.mr10{ margin-ri
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 72 74 61 6e 74 3b 7d 0a 2e 62 74 6e 2d 6c 6f 67 69 6e 7b 20 68 65 69 67 68 74 3a 20 33 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 32 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 7d 0a 2e 62 74 6e 2d 66 61 63 65 62 6f 6f 6b 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 36 39 42 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 33 70 78 20 73 6f 6c 69 64 20 23 33 31 34 41 38 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 62 74 6e 2d 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 31 34 41 38 36 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 33 70 78 20 73 6f 6c Data Ascii: rtant;}.btn-login{ height: 34px; line-height: 32px; padding: 0 15px;}.btn-facebook{ background: #39569B; color: #fff !important; border: none; border-bottom: 3px solid #314A86 !important;}.btn-facebook:hover{ background: #314A86; border-bottom: 3px sol
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6f 6e 3a 20 72 65 6c 61 74 69 76 65 7d 0a 23 6d 65 6e 75 20 75 6c 2e 74 6f 70 2d 6d 65 6e 75 20 6c 69 20 61 7b 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 37 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 73 77 61 6c 64 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 0a 23 6d 65 6e 75 20 75 6c 2e 74 6f 70 2d 6d 65 6e 75 20 6c 69 3a 68 6f 76 65 72 20 61 2c 20 23 6d 65 6e 75 20 75 6c 2e 74 6f 70 2d 6d 65 6e 75 20 6c 69 2e 61 63 74 69 76 65 20 61 7b 63 6f 6c 6f 72 3a 20 23 43 31 45 42 39 42 3b 7d 0a 23 6d Data Ascii: on: relative}#menu ul.top-menu li a{ height: 70px; line-height: 70px; margin: 0; padding: 0 5px; font-family: 'Oswald'; font-size: 16px; color: #FFF; display: inline-block;}#menu ul.top-menu li:hover a, #menu ul.top-menu li.active a{color: #C1EB9B;}#m
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 33 30 70 78 3b 7d 0a 23 74 6f 70 2d 75 73 65 72 7b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 7d 0a 23 74 6f 70 2d 75 73 65 72 20 2e 74 6f 70 2d 75 73 65 72 2d 63 6f 6e 74 65 6e 74 2e 67 75 65 73 74 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 70 78 3b 7d 0a 23 6d 61 69 6e 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 30 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 30 70 78 3b 7d 0a 2e 70 61 67 65 2d 63 61 74 65 67 6f 72 79 20 2e 70 61 64 7b 20 68 65 69 67 68 74 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 74 6f 70 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 20 34 30 35 70 78 3b 20 70 Data Ascii: eight: 30px;}#top-user{ float: right; margin-left: 15px;}#top-user .top-user-content.guest{ margin-top: 17px;}#main{ position: relative; min-height: 800px; padding-top: 70px;}.page-category .pad{ height: 20px !important;}.top-content{height: 405px; p
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 20 38 30 70 78 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 32 32 3b 20 77 69 64 74 68 3a 20 33 38 30 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 6e 61 76 7b 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 31 31 3b 20 62 6f 78 Data Ascii: : inline-block; width: 80px;}#top-news{ background: #222; width: 380px; height: 100%; overflow: hidden; color: #ccc; padding: 0px; position: absolute; top: 0; right: 0; z-index: 3;}#top-news .nav{ height: 40px; border-bottom: none; background: #111; box
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 75 6e 64 3a 20 23 31 38 31 38 31 38 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 6e 2d 6e 65 77 73 20 6c 69 3a 68 6f 76 65 72 20 2e 74 6e 63 2d 69 6e 66 6f 20 68 34 20 61 7b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 6e 2d 6e 65 77 73 20 6c 69 3a 68 6f 76 65 72 20 2e 6e 65 77 73 2d 74 68 75 6d 62 7b 20 6f 70 61 63 69 74 79 3a 20 31 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 6e 2d 6e 65 77 73 20 6c 69 20 2e 6e 65 77 73 2d 74 68 75 6d 62 7b 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 20 66 6c 6f 61 74 Data Ascii: und: #181818;}#top-news .top-news-content ul.tn-news li:hover .tnc-info h4 a{ color: #fff;}#top-news .top-news-content ul.tn-news li:hover .news-thumb{ opacity: 1;}#top-news .top-news-content ul.tn-news li .news-thumb{ width: 100px; height: 60px; float
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 2d 70 61 6e 65 20 2e 74 6e 63 2d 61 70 70 73 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 31 31 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 33 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e 74 61 62 2d 70 61 6e 65 20 2e 74 Data Ascii: top-news-content .tab-pane .tnc-apps{ background: #111; box-shadow: 0 0 10px rgba(0,0,0,0.5); position: absolute; z-index:3; bottom: 0; left: 0; width: 100%; padding: 10px; font-family: 'Montserrat'; font-size: 0;}#top-news .top-news-content .tab-pane .t
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 30 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 6e 2d 70 72 65 6d 69 75 6d 20 6c 69 20 61 3a 68 6f 76 65 72 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 35 35 35 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 7d 0a 23 74 6f 70 2d 6e 65 77 73 20 2e 74 6f 70 2d 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 75 6c 2e 74 6e 2d 70 72 65 6d 69 75 6d 20 6c 69 20 61 20 2e 70 72 69 63 65 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 0a 23 74 6f 70 2d Data Ascii: ; border-radius: 3px; box-shadow: 0 2px 0 0 rgba(255,255,255,0.1);}#top-news .top-news-content ul.tn-premium li a:hover{ background: #555; border-color: #888;}#top-news .top-news-content ul.tn-premium li a .price{ font-size: 40px; display: block;}#top-
2024-12-17 10:51:46 UTC	1369	IN	Data Raw: 6e 6f 72 6d 61 6c 3b 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 46 44 46 44 46 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 0a 2e 73 75 72 76 65 79 20 2e 73 76 2d 69 6e 66 6f 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 0a 2e 73 75 72 76 65 79 20 68 35 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 20 30 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 7d 0a 2e 73 75 72 76 65 79 20 2e 62 Data Ascii: normal; height: 24px; line-height: 24px; border-radius: 15px; border: 1px solid #DFDFDF; padding: 0 10px; display: inline-block;}.survey .sv-info{text-align: center;}.survey h5{ font-size: 20px; margin: 0 0 10px 0; font-family: 'Montserrat';}.survey .b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49769	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:48 UTC	1350	OUT	GET /css/jquery.cluetip.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: text/css Content-Length: 4103 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:58 GMT ETag: "1007-59c3156413d80" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2FXtnOaCJ5VK%2Ftnh2jo8XUXjyhc%2Bvq1vjJROpnrXde1aT%2FfOtMm%2FwsYuEosVysWaM5aGgkNCqa78uy5Sfv2cQgVWTxLJ68sP6cZ%2BxFINDHuAlDR%2FU8L4vFp7uA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c2f5a9ec32f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1465&min_rtt=1458&rtt_var=562&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1928&delivery_rate=1919789&cwnd=139&unsent_bytes=0&cid=b557c0fecbab6b86&ts=451&x=0"
2024-12-17 10:51:49 UTC	468	IN	Data Raw: 64 69 76 2e 75 69 2d 63 6c 75 65 74 69 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 7d 0a 2e 75 69 2d 63 6c 75 65 74 69 70 2d 68 65 61 64 65 72 2c 0a 2e 75 69 2d 63 6c 75 65 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 7d 0a 2e 75 69 2d 63 6c 75 65 74 69 70 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 74 69 74 6c 65 20 2e 63 6c 75 65 74 69 70 2d 63 6c 6f 73 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 63 6c 6f 73 65 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 3b 7d 0a 23 63 6c 75 65 74 69 70 2d 77 61 69 74 69 6d 61 67 Data Ascii: div.ui-cluetip{font-size:1em;}.ui-cluetip-header,.ui-cluetip-content{padding:12px;}.ui-cluetip-header{font-size:1em;margin:0;overflow:hidden;}.cluetip-title .cluetip-close{float:right;position:relative;}.cluetip-close img{border:0;}#cluetip-waitimag
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 65 78 74 72 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 64 65 66 61 75 6c 74 2c 0a 2e 63 6c 75 65 74 69 70 2d 64 65 66 61 75 6c 74 20 2e 63 6c 75 65 74 69 70 2d 6f 75 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 64 65 66 61 75 6c 74 20 2e 75 69 2d 63 6c 75 65 74 69 70 2d 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 37 39 43 31 34 32 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 32 70 78 3b 7d 0a 64 69 Data Ascii: ;background-position:0 0;border-width:0;}.cluetip-extra{display:none;}.cluetip-default,.cluetip-default .cluetip-outer{background-color:#fff;}.cluetip-default .ui-cluetip-header{background-color:#fff;color:#79C142;font-size:16px;padding:10px 12px;}di
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 2e 2e 2f 69 6d 61 67 65 73 2f 61 72 72 6f 77 2d 72 69 67 68 74 2e 70 6e 67 29 3b 6c 65 66 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 31 70 78 3b 7d 0a 64 69 76 2e 63 6c 75 65 2d 74 6f 70 2d 6a 74 69 70 20 2e 63 6c 75 65 74 69 70 2d 61 72 72 6f 77 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 61 72 72 6f 77 64 6f 77 6e 2e 70 6e 67 29 3b 74 6f 70 3a 31 30 30 25 3b 6c 65 66 74 3a 35 30 25 3b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 31 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 31 70 78 3b 7d 0a 64 69 76 2e 63 6c 75 65 2d 62 6f 74 74 6f 6d 2d 6a 74 69 70 20 2e 63 6c 75 65 74 69 70 2d 61 72 72 6f 77 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 Data Ascii: ../images/arrow-right.png);left:100%;margin-right:-11px;}div.clue-top-jtip .cluetip-arrows{background-image:url(../images/arrowdown.png);top:100%;left:50%;width:22px;height:11px;margin-left:-11px;}div.clue-bottom-jtip .cluetip-arrows{background-image:ur
2024-12-17 10:51:49 UTC	897	IN	Data Raw: 64 65 72 2d 77 69 64 74 68 3a 30 20 31 31 70 78 20 31 31 70 78 20 31 31 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 0a 2e 63 6c 75 65 74 69 70 2d 72 6f 75 6e 64 65 64 20 2e 63 6c 75 65 74 69 70 2d 74 69 74 6c 65 2c 0a 2e 63 6c 75 65 74 69 70 2d 72 6f 75 6e 64 65 64 20 2e 63 6c 75 65 74 69 70 2d 69 6e 6e 65 72 7b 7a 6f 6f 6d 3a 31 3b 7d 0a 2e 6a 74 69 70 2d 74 6f 70 7b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6f 6e 74 2d 77 65 69 Data Ascii: der-width:0 11px 11px 11px;border-top-color:transparent;border-right-color:transparent;border-left-color:transparent;}.cluetip-rounded .cluetip-title,.cluetip-rounded .cluetip-inner{zoom:1;}.jtip-top{padding:5px 12px;background:#eee;color:#333;font-wei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49770	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:48 UTC	1351	OUT	GET /css/jquery.qtip.min.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	889	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: text/css Content-Length: 8913 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:00 GMT ETag: "22d1-59c31565fc200" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7XnxAlHVti8h3Owr5XjmAxddekhLcNUStfvD8h6WOIscMlgziqYy12b1HTJtwzP06ppTwiy8G4CVvk%2FDeDbp7mQmgD22JGxZSaqYr4mAHPbi9kqGAaGH4RrPkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c2f8eaac468-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1505&min_rtt=1497&rtt_var=578&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1929&delivery_rate=1864623&cwnd=235&unsent_bytes=0&cid=8f12b7751c0f9f83&ts=449&x=0"
2024-12-17 10:51:49 UTC	480	IN	Data Raw: 2e 71 74 69 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 6f 72 64 2d 77 Data Ascii: .qtip{position:absolute;left:-28000px;top:-28000px;display:none;max-width:280px;min-width:50px;font-size:10.5px;line-height:12px;direction:ltr;box-shadow:none;padding:0}.qtip-content{position:relative;padding:5px 9px;overflow:hidden;text-align:left;word-w
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 3b 74 6f 70 3a 2d 39 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 20 2e 71 74 69 70 2d 63 6c 6f 73 65 7b 72 69 67 68 74 3a 34 70 78 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 39 70 78 7d 2a 20 68 74 6d 6c 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 20 2e 71 74 69 70 2d 63 6c 6f 73 65 7b 74 6f 70 3a 31 36 70 78 7d 2e 71 74 69 70 2d 69 63 6f 6e 20 2e 75 69 2d 69 63 6f 6e 2c 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 20 2e 75 69 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 31 30 30 30 65 Data Ascii: ;top:-9px;z-index:11;cursor:pointer;outline:0;border:1px solid transparent}.qtip-titlebar .qtip-close{right:4px;top:50%;margin-top:-9px}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{display:block;text-indent:-1000e
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 3a 2d 38 32 70 78 20 30 7d 2e 71 74 69 70 2d 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 37 38 42 38 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 39 35 32 35 32 3b 63 6f 6c 6f 72 3a 23 39 31 32 33 32 33 7d 2e 71 74 69 70 2d 72 65 64 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 30 36 44 36 35 7d 2e 71 74 69 70 2d 72 65 64 20 2e 71 74 69 70 2d 63 6c 6f 73 65 20 2e 71 74 69 70 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 32 70 78 20 30 7d 2e 71 74 69 70 2d 72 65 64 20 2e 71 74 69 70 2d 69 63 6f 6e 2c 2e 71 74 69 70 2d 72 65 64 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 7b 62 6f Data Ascii: :-82px 0}.qtip-red{background-color:#F78B83;border-color:#D95252;color:#912323}.qtip-red .qtip-titlebar{background-color:#F06D65}.qtip-red .qtip-close .qtip-icon{background-position:-102px 0}.qtip-red .qtip-icon,.qtip-red .qtip-titlebar .ui-state-hover{bo
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 41 34 41 34 41 20 30 2c 23 30 30 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 41 34 41 34 41 20 30 2c 23 30 30 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 41 34 41 34 41 20 30 2c 23 30 30 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 41 34 41 34 41 20 30 2c 23 30 30 30 20 31 30 30 25 29 7d 2e 71 74 69 70 2d 79 6f 75 74 75 62 65 20 Data Ascii: image:-webkit-linear-gradient(top,#4A4A4A 0,#000 100%);background-image:-moz-linear-gradient(top,#4A4A4A 0,#000 100%);background-image:-ms-linear-gradient(top,#4A4A4A 0,#000 100%);background-image:-o-linear-gradient(top,#4A4A4A 0,#000 100%)}.qtip-youtube
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 37 31 37 31 37 31 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 34 41 34 41 34 41 29 3b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 37 31 37 31 37 31 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 34 41 34 41 34 41 29 22 7d 2e 71 74 69 70 2d 6a 74 6f 6f 6c 73 20 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 34 41 34 41 34 41 2c 20 65 6e 64 43 Data Ascii: radient(startColorstr=#717171, endColorstr=#4A4A4A);-ms-filter:"progid:DXImageTransform.Microsoft.gradient(startColorstr=#717171,endColorstr=#4A4A4A)"}.qtip-jtools .qtip-content{filter:progid:DXImageTransform.Microsoft.gradient(startColorstr=#4A4A4A, endC
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 3a 23 32 32 32 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 71 74 69 70 2d 74 69 70 73 79 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 30 33 30 33 30 7d 2e 71 74 69 70 2d 74 69 70 70 65 64 7b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 23 39 35 39 46 41 39 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 39 46 39 46 39 3b 63 6f 6c 6f 72 3a 23 34 35 34 35 34 35 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d Data Ascii: :#222;text-shadow:none}.qtip-tipsy .qtip-titlebar .ui-state-hover{border-color:#303030}.qtip-tipped{border:3px solid #959FA9;-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;background-color:#F9F9F9;color:#454545;font-weight:400;font-fam
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 7d 2e 71 74 69 70 2d 62 6f 6f 74 73 74 72 61 70 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 34 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 62 65 62 65 62 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 Data Ascii: -box;-moz-background-clip:padding;background-clip:padding-box}.qtip-bootstrap .qtip-titlebar{padding:8px 14px;margin:0;font-size:14px;font-weight:400;line-height:18px;background-color:#f7f7f7;border-bottom:1px solid #ebebeb;-webkit-border-radius:5px 5px 0
2024-12-17 10:51:49 UTC	219	IN	Data Raw: 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 71 74 69 70 2d 6f 76 65 72 6c 61 79 20 64 69 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 37 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 37 30 29 3b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 61 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 37 30 29 22 7d 2e 71 74 69 70 6d 6f 64 61 6c 2d 69 65 36 66 69 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: sor:pointer}#qtip-overlay div{position:absolute;left:0;top:0;width:100%;height:100%;background-color:#000;opacity:.7;filter:alpha(opacity=70);-ms-filter:"alpha(Opacity=70)"}.qtipmodal-ie6fix{position:absolute!important}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49771	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:48 UTC	1348	OUT	GET /css/custom.css?v=1.1 HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	894	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: text/css Content-Length: 4029 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:57 GMT ETag: "fbd-59c315631fb40" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dv%2FI0nNX7gHaquXM%2FlAKuI%2BWfghsJ1JmO0EcnLylGuZbIlQS6QR4A8gCiGSNkx5DOIJACB2K7Uqicj3bzWZ8SOwRbT2C%2BLSwrYE4cp9LKjbmBHdJS2Cz2ssLpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c2f8d4118c8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1487&min_rtt=1480&rtt_var=569&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1926&delivery_rate=1901041&cwnd=148&unsent_bytes=0&cid=eaf2bc56b542d3ef&ts=450&x=0"
2024-12-17 10:51:49 UTC	475	IN	Data Raw: 2e 65 72 72 6f 72 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 72 65 64 3b 7d 0a 2e 6a 77 2d 73 6b 69 6e 2d 73 65 76 65 6e 20 2e 6a 77 2d 6f 76 65 72 6c 61 79 20 2e 6a 77 2d 70 6c 61 79 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 34 30 30 70 78 3b 6c 65 66 74 3a 2d 32 30 25 3b 7d 0a 2e 6a 77 70 6c 61 79 65 72 20 2e 6a 77 2d 70 6c 61 79 6c 69 73 74 7b 68 65 69 67 68 74 3a 32 35 30 70 78 3b 7d 0a 2e 6a 77 70 6c 61 79 65 72 20 2e 6a 77 2d 70 6c 61 79 6c 69 73 74 20 2e 6a 77 2d 6f 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 7d 0a 2e 6a 77 2d 70 6c 61 79 6c 69 73 74 20 2e 6a 77 2d 6e 61 6d 65 7b 77 69 64 74 Data Ascii: .error-block{display:none;color:red;}.jw-skin-seven .jw-overlay .jw-playlist-container{width:400px;left:-20%;}.jwplayer .jw-playlist{height:250px;}.jwplayer .jw-playlist .jw-option{padding:0 15px;margin:auto;text-align:left;}.jw-playlist .jw-name{widt
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 74 69 70 20 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 20 2e 66 2d 64 65 73 63 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 71 74 69 70 20 2e 71 74 69 70 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 37 31 42 34 33 45 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 7d 0a 2e 71 74 69 70 20 2e 71 74 69 70 2d 74 69 74 6c 65 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 Data Ascii: tip .qtip-content .f-desc{line-height:1.3em !important;font-size:12px !important;}.qtip .qtip-title{margin-right:60px;background:#fff;color:#71B43E;font-size:16px;font-weight:600;padding:10px 12px;line-height:normal;}.qtip .qtip-titlebar{background:none
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 2e 63 73 73 6c 6f 61 64 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 20 2e 63 73 73 6c 6f 61 64 20 73 70 61 6e 3a 61 66 74 65 72 7b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 37 39 43 31 34 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 2d 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 Data Ascii: .cssload span:before, .cssload span:after{ top: 0; left: 0; position: absolute; border-bottom: 2px solid transparent !important; border: 2px solid #79C142; border-radius: 50%; -o-border-radius: 50%; -ms-border-radius: 50%;
2024-12-17 10:51:49 UTC	816	IN	Data Raw: 61 74 65 20 32 33 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 6c 6f 61 64 2d 72 6f 74 61 74 65 20 32 33 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 6c 6f 61 64 2d 72 6f 74 61 74 65 20 32 33 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 63 73 73 6c 6f 61 64 2d 72 6f 74 61 74 65 20 32 33 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 2e 63 73 73 6c 6f 61 64 2d 32 78 20 2e 63 73 73 6c 6f 61 64 20 73 70 61 6e 3a 3a 61 66 74 65 72 2c 20 2e 63 73 73 6c 6f 61 64 2d 33 78 20 Data Ascii: ate 2300ms linear infinite; -ms-animation: cssload-rotate 2300ms linear infinite; -webkit-animation: cssload-rotate 2300ms linear infinite; -moz-animation: cssload-rotate 2300ms linear infinite;}.cssload-2x .cssload span::after, .cssload-3x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49772	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:49 UTC	1341	OUT	GET /css/slide.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	904	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: text/css Content-Length: 14733 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:03 GMT ETag: "398d-59c31568d88c0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WxZ3prwtY%2FWvsIXpQPik%2Fb2H3CHf%2FZVLu4r68FRpyBt7Q9VJCG%2Bzv9ebCasDm3KsTrOaBV6Oib%2BYxAZj1l%2BYS2lkXQm8DRbAU%2BIHVe%2FDKlsWmYqhP8QerC8u0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c325b132369-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1814&min_rtt=1801&rtt_var=701&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1919&delivery_rate=1532004&cwnd=142&unsent_bytes=0&cid=15f99246d518d96b&ts=449&x=0"
2024-12-17 10:51:49 UTC	465	IN	Data Raw: 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6e 6f 2d 66 6c 65 78 62 6f 78 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 6d 6f 7a 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 Data Ascii: .swiper-container{margin:0 auto;position:relative;overflow:hidden;z-index:1;}.swiper-container-no-flexbox .swiper-slide{float:left;}.swiper-container-vertical > .swiper-wrapper{-webkit-box-orient:vertical;-moz-box-orient:vertical;-ms-flex-direction:colu
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: flex;-webkit-transform-style:preserve-3d;-moz-transform-style:preserve-3d;-ms-transform-style:preserve-3d;transform-style:preserve-3d;-webkit-transition-property:-webkit-transform;-moz-transition-property:-moz-transform;-o-transition-property:-o-transform
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 63 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 30 30 30 3b 7d 0a 2e 73 77 69 70 65 72 2d 77 70 38 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 3b 7d 0a 2e 73 77 69 70 65 72 2d 77 70 38 2d 76 65 72 74 69 63 61 6c 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 78 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 78 3b 7d 0a 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 0a 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 Data Ascii: cation{position:absolute;left:0;top:0;pointer-events:none;opacity:0;z-index:-1000;}.swiper-wp8-horizontal{-ms-touch-action:pan-y;touch-action:pan-y;}.swiper-wp8-vertical{-ms-touch-action:pan-x;touch-action:pan-x;}.swiper-button-prev,.swiper-button-nex
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 22 29 3b 7d 0a 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 77 68 69 74 65 2c 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 77 68 69 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 25 33 44 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 27 25 32 30 76 69 65 77 42 6f 78 25 33 44 27 30 25 32 30 30 25 32 30 32 37 25 32 30 34 34 27 25 33 45 25 33 43 70 Data Ascii: ");}.swiper-button-prev.swiper-button-white,.swiper-container-rtl .swiper-button-next.swiper-button-white{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D'http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg'%20viewBox%3D'0%200%2027%2044'%3E%3Cp
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 34 34 27 25 33 45 25 33 43 70 61 74 68 25 32 30 64 25 33 44 27 4d 32 37 25 32 43 32 32 4c 32 37 25 32 43 32 32 4c 35 25 32 43 34 34 6c 2d 32 2e 31 2d 32 2e 31 4c 32 32 2e 38 25 32 43 32 32 4c 32 2e 39 25 32 43 32 2e 31 4c 35 25 32 43 30 4c 32 37 25 32 43 32 32 4c 32 37 25 32 43 32 32 7a 27 25 32 30 66 69 6c 6c 25 33 44 27 25 32 33 66 66 66 66 66 66 27 25 32 46 25 33 45 25 33 43 25 32 46 73 76 67 25 33 45 22 29 3b 7d 0a 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 33 30 30 6d 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 33 30 30 6d 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f Data Ascii: 44'%3E%3Cpath%20d%3D'M27%2C22L27%2C22L5%2C44l-2.1-2.1L22.8%2C22L2.9%2C2.1L5%2C0L27%2C22L27%2C22z'%20fill%3D'%23ffffff'%2F%3E%3C%2Fsvg%3E");}.swiper-pagination{position:absolute;text-align:center;-webkit-transition:300ms;-moz-transition:300ms;-o-transitio
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 2c 20 30 29 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 6d 61 72 67 69 6e 3a 35 70 78 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 3e 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 35 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 3e 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 Data Ascii: , 0);}.swiper-container-vertical > .swiper-pagination .swiper-pagination-bullet{margin:5px 0;display:block;}.swiper-container-horizontal > .swiper-pagination{bottom:20px;left:20px;width:50%;text-align:left;}.swiper-container-horizontal > .swiper-pagina
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 20 30 2c 20 30 2c 20 30 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 72 69 67 68 74 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 72 69 67 68 74 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 6c 65 66 74 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 3b Data Ascii: 0, 0, 0));background-image:-moz-linear-gradient(right, rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0));background-image:-o-linear-gradient(right, rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0));background-image:linear-gradient(to left, rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0));
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 30 2c 20 30 2e 35 29 29 2c 20 74 6f 28 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 Data Ascii: 0, 0.5)), to(rgba(0, 0, 0, 0)));background-image:-webkit-linear-gradient(top, rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0));background-image:-moz-linear-gradient(top, rgba(0, 0, 0, 0.5), rgba(0, 0, 0, 0));background-image:-o-linear-gradient(top, rgba(0, 0, 0, 0.5
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 61 63 74 69 76 65 2c 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 6e 65 78 74 2c 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 70 72 65 76 2c 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 6e 65 78 74 20 2b 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 7d 0a 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 63 75 Data Ascii: container-cube .swiper-slide-active,.swiper-container-cube .swiper-slide-next,.swiper-container-cube .swiper-slide-prev,.swiper-container-cube .swiper-slide-next + .swiper-slide{pointer-events:auto;visibility:visible;}.swiper-container-cube .swiper-cu
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 73 28 31 32 2c 20 65 6e 64 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0a 2e 73 77 69 70 65 72 2d 6c 61 7a 79 2d 70 72 65 6c 6f 61 64 65 72 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 25 32 30 76 69 65 77 42 6f 78 25 33 44 27 30 25 32 30 30 25 32 30 31 32 30 25 32 30 31 32 30 27 25 32 30 78 6d 6c 6e 73 25 33 44 27 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 27 25 32 30 78 6d 6c 6e 73 25 33 41 78 6c 69 Data Ascii: s(12, end) infinite;}.swiper-lazy-preloader:after{display:block;content:"";width:100%;height:100%;background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg%20viewBox%3D'0%200%20120%20120'%20xmlns%3D'http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg'%20xmlns%3Axli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49773	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:49 UTC	1341	OUT	GET /css/psbar.css HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: text/css Content-Length: 3180 Connection: close Last-Modified: Wed, 15 Jan 2020 17:49:58 GMT ETag: "c6c-59c3156413d80" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DoF8tPtJRWswA%2Fhu%2FDqKWZ%2B%2FIFZVQcLzuGTVmdRoQn0HMrrP0P%2BvaKmID0dauMk6Hzy6vwyoTcjiptrwqC9W0hexKnyXmdwk7DKWt81jYaYS%2BJ5vNMZTPZZdQw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c3338a742e5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1565&min_rtt=1556&rtt_var=601&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1919&delivery_rate=1793611&cwnd=221&unsent_bytes=0&cid=9ce590568bf948e6&ts=448&x=0"
2024-12-17 10:51:49 UTC	471	IN	Data Raw: 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 61 63 74 69 76 65 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 2c 20 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 61 63 74 69 76 65 2d 79 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 Data Ascii: .ps-container{-ms-touch-action:none;overflow:hidden !important;}.ps-container.ps-active-x > .ps-scrollbar-x-rail, .ps-container.ps-active-y > .ps-scrollbar-y-rail{display:block;}.ps-container.ps-in-scrolling{pointer-events:none;}.ps-container.ps-in-scr
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 30 2e 39 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 79 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d Data Ascii: llbar-y-rail{background-color:#eee;opacity:0.9;}.ps-container.ps-in-scrolling.ps-y > .ps-scrollbar-y-rail > .ps-scrollbar-y{background-color:#999;}.ps-container > .ps-scrollbar-x-rail{display:none;position:absolute;-webkit-border-radius:4px;-moz-border-
2024-12-17 10:51:49 UTC	1340	IN	Data Raw: 20 6f 70 61 63 69 74 79 20 2e 32 73 20 6c 69 6e 65 61 72 3b 72 69 67 68 74 3a 33 70 78 3b 77 69 64 74 68 3a 36 70 78 3b 7d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: opacity .2s linear;right:3px;width:6px;}.ps-container > .ps-scrollbar-y-rail > .ps-scrollbar-y{position:absolute;background-color:#555;-webkit-border-radius:3px;-moz-border-radius:3px;-ms-border-radius:3px;border-radius:3px;-webkit-transition:background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49774	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:49 UTC	1326	OUT	GET /js/base64.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:49 UTC	906	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:49 GMT Content-Type: application/javascript Content-Length: 3031 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:18 GMT ETag: "bd7-59c3157726a80" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5495 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DB2k9wKAjUyAQsGKi8wXnqyasL9Hu1tbSiwZS0N1vdAvbvFmkdSZqxQvS%2FBH71NvI%2BbHjg5qmS8iWBh9RdyD6kkcW3jW44HxunfjjLRdFdxSyHvVBSLzXJGp%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c341d7042d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&min_rtt=1576&rtt_var=596&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1904&delivery_rate=1826141&cwnd=246&unsent_bytes=0&cid=8e4ce26f143ac38a&ts=449&x=0"
2024-12-17 10:51:49 UTC	463	IN	Data Raw: 76 61 72 20 42 61 73 65 36 34 20 3d 20 7b 0d 0a 0d 0a 09 2f 2f 20 70 72 69 76 61 74 65 20 70 72 6f 70 65 72 74 79 0d 0a 09 5f 6b 65 79 53 74 72 20 3a 20 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 0d 0a 0d 0a 09 2f 2f 20 70 75 62 6c 69 63 20 6d 65 74 68 6f 64 20 66 6f 72 20 65 6e 63 6f 64 69 6e 67 0d 0a 09 65 6e 63 6f 64 65 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 70 75 74 29 20 7b 0d 0a 09 09 76 61 72 20 6f 75 74 70 75 74 20 3d 20 22 22 3b 0d 0a 09 09 76 61 72 20 63 68 72 31 2c 20 63 68 72 32 2c 20 63 68 72 33 2c 20 65 6e 63 31 2c 20 65 6e 63 32 2c 20 65 6e 63 33 2c 20 65 6e 63 34 3b 0d 0a 09 Data Ascii: var Base64 = {// private property_keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",// public method for encodingencode : function (input) {var output = "";var chr1, chr2, chr3, enc1, enc2, enc3, enc4;
2024-12-17 10:51:49 UTC	1369	IN	Data Raw: 3e 20 32 3b 0d 0a 09 09 09 65 6e 63 32 20 3d 20 28 28 63 68 72 31 20 26 20 33 29 20 3c 3c 20 34 29 20 7c 20 28 63 68 72 32 20 3e 3e 20 34 29 3b 0d 0a 09 09 09 65 6e 63 33 20 3d 20 28 28 63 68 72 32 20 26 20 31 35 29 20 3c 3c 20 32 29 20 7c 20 28 63 68 72 33 20 3e 3e 20 36 29 3b 0d 0a 09 09 09 65 6e 63 34 20 3d 20 63 68 72 33 20 26 20 36 33 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 69 73 4e 61 4e 28 63 68 72 32 29 29 20 7b 0d 0a 09 09 09 09 65 6e 63 33 20 3d 20 65 6e 63 34 20 3d 20 36 34 3b 0d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 69 73 4e 61 4e 28 63 68 72 33 29 29 20 7b 0d 0a 09 09 09 09 65 6e 63 34 20 3d 20 36 34 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 6f 75 74 70 75 74 20 3d 20 6f 75 74 70 75 74 20 2b 0d 0a 09 09 09 74 68 69 73 2e 5f 6b 65 79 53 74 Data Ascii: > 2;enc2 = ((chr1 & 3) << 4) \| (chr2 >> 4);enc3 = ((chr2 & 15) << 2) \| (chr3 >> 6);enc4 = chr3 & 63;if (isNaN(chr2)) {enc3 = enc4 = 64;} else if (isNaN(chr3)) {enc4 = 64;}output = output +this._keySt
2024-12-17 10:51:49 UTC	1199	IN	Data Raw: 0d 0a 09 09 76 61 72 20 75 74 66 74 65 78 74 20 3d 20 22 22 3b 0d 0a 0d 0a 09 09 66 6f 72 20 28 76 61 72 20 6e 20 3d 20 30 3b 20 6e 20 3c 20 73 74 72 69 6e 67 2e 6c 65 6e 67 74 68 3b 20 6e 2b 2b 29 20 7b 0d 0a 0d 0a 09 09 09 76 61 72 20 63 20 3d 20 73 74 72 69 6e 67 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 63 20 3c 20 31 32 38 29 20 7b 0d 0a 09 09 09 09 75 74 66 74 65 78 74 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 28 28 63 20 3e 20 31 32 37 29 20 26 26 20 28 63 20 3c 20 32 30 34 38 29 29 20 7b 0d 0a 09 09 09 09 75 74 66 74 65 78 74 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 63 20 3e 3e 20 36 29 Data Ascii: var utftext = "";for (var n = 0; n < string.length; n++) {var c = string.charCodeAt(n);if (c < 128) {utftext += String.fromCharCode(c);}else if((c > 127) && (c < 2048)) {utftext += String.fromCharCode((c >> 6)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49783	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:51 UTC	1324	OUT	GET /js/load.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	916	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:51 GMT Content-Type: application/javascript Content-Length: 12333 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:18 GMT ETag: "302d-59c3157726a80" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5497 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I1bkQIQsBTOXlWSN3Fivg7epSBATJM2UyHILQV1SYqT1REHvGXoT%2Bnxdrip%2FyY5YpZEl0OEvQI88%2B4WUasd5JNnGb%2B%2BDFsdC5M%2FQevWH1zkkocuO9rZD%2FVehDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c414e5772a4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1811&min_rtt=1807&rtt_var=685&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1902&delivery_rate=1587819&cwnd=212&unsent_bytes=0&cid=96b8daba8ecb9c9f&ts=450&x=0"
2024-12-17 10:51:52 UTC	453	IN	Data Raw: ef bb bf 76 61 72 20 68 74 74 70 20 3d 20 63 72 65 61 74 65 52 65 71 75 65 73 74 4f 62 6a 65 63 74 28 29 3b 0d 0a 76 61 72 20 66 69 65 6c 64 20 3d 20 27 27 3b 0d 0a 76 61 72 20 6c 6f 61 64 69 6e 67 66 69 6c 6d 20 3d 20 27 27 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 69 78 28 29 20 7b 0d 0a 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 69 78 3b 0d 0a 7b 77 69 6e 64 6f 77 2e 73 74 61 74 75 73 3d 22 44 6f 6e 65 22 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 52 65 71 75 65 73 74 4f 62 6a 65 63 74 28 29 20 7b 0d 0a 09 76 61 72 20 78 6d 6c 68 74 74 70 3b 0d 0a 09 74 72 79 20 7b 20 78 6d 6c 68 74 74 70 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 Data Ascii: var http = createRequestObject();var field = '';var loadingfilm = '';function fix() {return true;}window.onerror = fix;{window.status="Done"}function createRequestObject() {var xmlhttp;try { xmlhttp=new ActiveXObject("Msxml2.XMLHT
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 7d 0d 0a 09 72 65 74 75 72 6e 20 20 78 6d 6c 68 74 74 70 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 52 65 73 70 6f 6e 73 65 28 29 20 7b 0d 0a 09 74 72 79 20 7b 0d 0a 09 09 69 66 28 28 68 74 74 70 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 34 29 26 26 28 68 74 74 70 2e 73 74 61 74 75 73 20 3d 3d 20 32 30 30 29 29 7b 0d 0a 09 09 09 72 65 73 70 6f 6e 73 65 20 3d 20 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 0d 0a 09 09 09 66 69 65 6c 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 3b 0d 0a 09 09 09 66 69 65 6c 64 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 29 3b 0d 0a 09 09 09 69 66 28 21 72 65 73 70 6f 6e 73 65 29 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 Data Ascii: ); }return xmlhttp;}function handleResponse() {try {if((http.readyState == 4)&&(http.status == 200)){response = http.responseText;field.innerHTML = response;field.scrollIntoView();if(!response) window.location.href
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 23 23 23 23 23 23 23 23 23 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 64 64 54 65 78 74 28 65 6c 6e 61 6d 65 2c 20 77 72 61 70 31 2c 20 77 72 61 70 32 29 20 7b 0d 0a 09 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 29 20 7b 20 2f 2f 20 66 6f 72 20 49 45 20 0d 0a 09 09 76 61 72 20 73 74 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2e 74 65 78 74 3b 0d 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 27 61 64 64 27 5d 2e 65 6c 65 6d 65 6e 74 73 5b 65 6c 6e 61 6d 65 5d 2e 66 6f 63 75 73 28 29 3b 0d 0a 09 09 76 61 72 20 73 65 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 3b 0d 0a 09 09 73 65 6c 2e 74 65 78 74 20 3d 20 Data Ascii: #########function addText(elname, wrap1, wrap2) {if (document.selection) { // for IE var str = document.selection.createRange().text;document.forms['add'].elements[elname].focus();var sel = document.selection.createRange();sel.text =
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 65 6c 64 2c 20 6d 61 78 6c 69 6d 69 74 29 20 7b 0d 0a 77 6f 72 64 63 6f 75 6e 74 65 72 3d 30 3b 0d 0a 66 6f 72 20 28 78 3d 30 3b 78 3c 66 69 65 6c 64 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3b 78 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 66 69 65 6c 64 2e 76 61 6c 75 65 2e 63 68 61 72 41 74 28 78 29 20 3d 3d 20 22 20 22 20 26 26 20 66 69 65 6c 64 2e 76 61 6c 75 65 2e 63 68 61 72 41 74 28 78 2d 31 29 20 21 3d 20 22 20 22 29 20 20 7b 77 6f 72 64 63 6f 75 6e 74 65 72 2b 2b 7d 0d 0a 20 20 20 20 20 20 69 66 20 28 77 6f 72 64 63 6f 75 6e 74 65 72 20 3e 20 32 35 30 29 20 7b 66 69 65 6c 64 2e 76 61 6c 75 65 20 3d 20 66 69 65 6c 64 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 78 29 3b 7d 0d 0a 20 20 20 20 20 20 65 6c 73 65 20 7b 63 6f 75 6e Data Ascii: eld, maxlimit) {wordcounter=0;for (x=0;x<field.value.length;x++) { if (field.value.charAt(x) == " " && field.value.charAt(x-1) != " ") {wordcounter++} if (wordcounter > 250) {field.value = field.value.substring(0, x);} else {coun
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 09 7d 0d 0a 09 09 09 65 6c 73 65 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6d 6d 65 6e 74 5f 6c 6f 61 64 69 6e 67 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 72 65 73 70 6f 6e 73 65 3b 0d 0a 0d 0a 09 09 7d 0d 0a 20 20 09 7d 0d 0a 09 63 61 74 63 68 28 65 29 7b 7d 0d 0a 09 66 69 6e 61 6c 6c 79 7b 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 6d 65 6e 74 5f 63 68 65 63 6b 5f 76 61 6c 75 65 73 28 29 20 7b 0d 0a 09 66 69 6c 6d 5f 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 69 6c 6d 5f 69 64 22 29 2e 76 61 6c 75 65 29 3b 0d 0a 09 6e 75 6d 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: }else document.getElementById("comment_loading").innerHTML = response;} }catch(e){}finally{}}function comment_check_values() {film_id = encodeURIComponent(document.getElementById("film_id").value);num = encodeURIComponent
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 73 73 28 29 3b 0d 0a 09 09 68 74 74 70 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 20 27 2f 72 61 74 69 6e 67 27 29 3b 0d 0a 09 09 68 74 74 70 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 2c 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 27 29 3b 0d 0a 09 09 68 74 74 70 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 69 66 28 28 68 74 74 70 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 34 29 26 26 28 68 74 74 70 2e 73 74 61 74 75 73 20 3d 3d 20 32 30 30 29 29 7b 0d 0a 09 09 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 61 74 69 6e 67 5f 66 69 65 Data Ascii: ss();http.open('POST', '/rating');http.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');http.onreadystatechange = function() {if((http.readyState == 4)&&(http.status == 200)){document.getElementById("rating_fie
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0d 0a 09 09 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 61 74 65 5f 73 22 29 29 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 61 74 65 5f 73 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 7d 0d 0a 09 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 5f 72 61 74 69 6e 67 5f 70 72 6f 63 65 73 73 28 29 20 7b 0d 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 61 74 69 6e 67 5f 70 72 6f 63 65 73 73 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 09 09 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 Data Ascii: display = "block";if(document.getElementById("rate_s")) document.getElementById("rate_s").style.display = "none";}function hide_rating_process() {document.getElementById("rating_process").style.display = "none";if(document.getElementById
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 71 75 65 73 74 5f 65 6d 61 69 6c 22 29 2e 76 61 6c 75 65 29 3b 0d 0a 09 74 72 79 7b 0d 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 71 75 65 73 74 5f 6c 6f 61 64 69 6e 67 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6c 6f 61 64 69 6e 67 54 65 78 74 3b 0d 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 71 75 65 73 74 5f 6c 6f 61 64 69 6e 67 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0d 0a 09 09 09 68 74 74 70 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 20 27 69 6e 64 65 78 2e 70 68 Data Ascii: l = encodeURIComponent(document.getElementById("request_email").value);try{document.getElementById("request_loading").innerHTML = loadingText;document.getElementById("request_loading").style.display = "block";http.open('POST', 'index.ph
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0d 0a 2f 2f 23 20 53 48 4f 57 20 46 49 4c 4d 0d 0a 2f 2f 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 46 69 6c 6d 28 6e 75 6d 2c 70 61 67 65 2c 6e 75 6d 62 65 72 2c 61 70 72 2c 63 61 74 5f 69 64 29 20 7b 20 0d 0a 20 20 20 20 66 69 65 6c 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 75 6d 29 3b 0d 0a 09 66 69 65 6c 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6c 6f 61 64 69 6e 67 54 65 78 74 3b 0d 0a 09 68 74 74 70 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 20 27 69 6e 64 65 78 2e 70 68 70 27 29 3b 0d 0a 09 68 74 Data Ascii: ###############################//# SHOW FILM//#######################################function showFilm(num,page,number,apr,cat_id) { field = document.getElementById(num);field.innerHTML = loadingText;http.open('POST', 'index.php');ht
2024-12-17 10:51:52 UTC	928	IN	Data Raw: 2f 2f 20 69 66 20 4d 6f 7a 69 6c 6c 61 2c 20 53 61 66 61 72 69 20 65 74 63 0d 0a 70 61 67 65 5f 72 65 71 75 65 73 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 0d 0a 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 7b 20 2f 2f 20 69 66 20 49 45 0d 0a 74 72 79 20 7b 0d 0a 70 61 67 65 5f 72 65 71 75 65 73 74 20 3d 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 29 0d 0a 7d 20 0d 0a 63 61 74 63 68 20 28 65 29 7b 0d 0a 74 72 79 7b 0d 0a 70 61 67 65 5f 72 65 71 75 65 73 74 20 3d 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 0d 0a 7d 0d 0a 63 61 74 63 68 20 28 65 29 7b Data Ascii: // if Mozilla, Safari etcpage_request = new XMLHttpRequest()else if (window.ActiveXObject){ // if IEtry {page_request = new ActiveXObject("Msxml2.XMLHTTP")} catch (e){try{page_request = new ActiveXObject("Microsoft.XMLHTTP")}catch (e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49784	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:51 UTC	1328	OUT	GET /js/tooltips.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	910	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:51 GMT Content-Type: application/javascript Content-Length: 37855 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:22 GMT ETag: "93df-59c3157af7380" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5497 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7paWlyIZ6zIxJ1QAY%2BcgaxvJe5Y4rGtA%2BTBCh2viCpBD%2FN2Ark3fKZRAFeLUhF4KCB1HtoiyD5lPV%2BuL9HeLuIMcr0jyVnegCpfswKjSfcfaYNCvZ8m5gMMNxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c418d564207-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1562&min_rtt=1556&rtt_var=597&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1906&delivery_rate=1813664&cwnd=183&unsent_bytes=0&cid=5ef0266d82dbd796&ts=447&x=0"
2024-12-17 10:51:52 UTC	459	IN	Data Raw: ef bb bf 2f 2a 20 54 68 69 73 20 6e 6f 74 69 63 65 20 6d 75 73 74 20 62 65 20 75 6e 74 6f 75 63 68 65 64 20 61 74 20 61 6c 6c 20 74 69 6d 65 73 2e 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 32 2d 32 30 30 38 20 57 61 6c 74 65 72 20 5a 6f 72 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 0d 0a 77 7a 5f 74 6f 6f 6c 74 69 70 2e 6a 73 09 20 76 2e 20 35 2e 33 31 0d 0a 0d 0a 54 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 0d 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 74 65 72 7a 6f 72 6e 2e 63 6f 6d 0d 0a 6f 72 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 65 76 69 72 61 2e 63 6f 6d 0d 0a 6f 72 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 74 65 72 7a 6f 72 6e 2e 64 65 0d Data Ascii: /* This notice must be untouched at all times.Copyright (c) 2002-2008 Walter Zorn. All rights reserved.wz_tooltip.js v. 5.31The latest version is available athttp://www.walterzorn.comor http://www.devira.comor http://www.walterzorn.de
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 69 6e 76 6f 6b 65 0d 0a 54 69 70 28 27 54 6f 6f 6c 74 69 70 20 74 65 78 74 27 29 20 74 6f 20 73 68 6f 77 20 61 6e 64 20 55 6e 54 69 70 28 29 20 74 6f 20 68 69 64 65 20 74 68 65 20 74 6f 6f 6c 74 69 70 2c 20 66 72 6f 6d 20 74 68 65 20 64 65 73 69 72 65 64 0d 0a 48 54 4d 4c 20 65 76 65 6e 74 68 61 6e 64 6c 65 72 73 2e 20 45 78 61 6d 70 6c 65 3a 0d 0a 3c 61 20 6f 6e 6d 6f 75 73 65 6f 76 65 72 3d 22 54 69 70 28 27 53 6f 6d 65 20 74 65 78 74 27 29 22 20 6f 6e 6d 6f 75 73 65 6f 75 74 3d 22 55 6e 54 69 70 28 29 22 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 22 3e 4d 79 20 68 6f 6d 65 20 70 61 67 65 3c 2f 61 3e 0d 0a 4e 6f 20 63 6f 6e 74 61 69 6e 65 72 20 44 49 56 20 72 65 71 75 69 72 65 64 2e 0d 0a 42 79 20 64 65 66 61 75 6c 74 2c 20 77 69 64 74 68 20 61 6e Data Ascii: invokeTip('Tooltip text') to show and UnTip() to hide the tooltip, from the desiredHTML eventhandlers. Example:<a onmouseover="Tip('Some text')" onmouseout="UnTip()" href="index.htm">My home page</a>No container DIV required.By default, width an
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 61 72 20 74 74 5f 44 65 62 75 67 09 3d 20 74 72 75 65 09 09 2f 2f 20 66 61 6c 73 65 20 6f 72 20 74 72 75 65 20 2d 20 72 65 63 6f 6d 6d 65 6e 64 65 64 3a 20 66 61 6c 73 65 20 6f 6e 63 65 20 79 6f 75 20 72 65 6c 65 61 73 65 20 79 6f 75 72 20 70 61 67 65 20 74 6f 20 74 68 65 20 70 75 62 6c 69 63 0d 0a 76 61 72 20 74 74 5f 45 6e 61 62 6c 65 64 09 3d 20 74 72 75 65 09 09 2f 2f 20 41 6c 6c 6f 77 73 20 74 6f 20 28 74 65 6d 70 6f 72 61 72 69 6c 79 29 20 73 75 70 70 72 65 73 73 20 74 6f 6f 6c 74 69 70 73 2c 20 65 2e 67 2e 20 62 79 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 74 68 20 61 20 62 75 74 74 6f 6e 20 74 68 61 74 20 73 65 74 73 20 74 68 69 73 20 67 6c 6f 62 61 6c 20 76 61 72 69 61 62 6c 65 20 74 6f 20 66 61 6c 73 65 0d 0a 76 61 72 20 Data Ascii: ar tt_Debug= true// false or true - recommended: false once you release your page to the publicvar tt_Enabled= true// Allows to (temporarily) suppress tooltips, e.g. by providing the user with a button that sets this global variable to falsevar
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 2f 20 66 61 6c 73 65 20 6f 72 20 74 72 75 65 20 2d 20 63 6c 6f 73 65 20 74 6f 6f 6c 74 69 70 20 69 66 20 74 68 65 20 75 73 65 72 20 63 6c 69 63 6b 73 20 73 6f 6d 65 77 68 65 72 65 0d 0a 63 6f 6e 66 69 67 2e 20 43 6c 69 63 6b 53 74 69 63 6b 79 09 09 3d 20 66 61 6c 73 65 09 09 2f 2f 20 66 61 6c 73 65 20 6f 72 20 74 72 75 65 20 2d 20 6d 61 6b 65 20 74 6f 6f 6c 74 69 70 20 73 74 69 63 6b 79 20 69 66 20 75 73 65 72 20 6c 65 66 74 2d 63 6c 69 63 6b 73 20 6f 6e 20 74 68 65 20 68 6f 76 65 72 65 64 20 65 6c 65 6d 65 6e 74 20 77 68 69 6c 65 20 74 68 65 20 74 6f 6f 6c 74 69 70 20 69 73 20 61 63 74 69 76 65 0d 0a 63 6f 6e 66 69 67 2e 20 43 6c 6f 73 65 42 74 6e 09 09 3d 20 66 61 6c 73 65 09 09 2f 2f 20 66 61 6c 73 65 20 6f 72 20 74 72 75 65 20 2d 20 63 6c 6f 73 65 62 Data Ascii: / false or true - close tooltip if the user clicks somewhereconfig. ClickSticky= false// false or true - make tooltip sticky if user left-clicks on the hovered element while the tooltip is activeconfig. CloseBtn= false// false or true - closeb
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 72 64 69 6e 61 74 65 73 20 69 6e 20 62 72 61 63 6b 65 74 73 2c 20 65 2e 67 2e 20 5b 32 31 30 2c 20 34 38 30 5d 2e 20 4d 6f 64 65 20 32 3a 20 53 68 6f 77 20 74 6f 6f 6c 74 69 70 20 61 74 20 61 20 70 6f 73 69 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 6e 20 48 54 4d 4c 20 65 6c 65 6d 65 6e 74 3a 20 5b 49 44 20 6f 66 20 48 54 4d 4c 20 65 6c 65 6d 65 6e 74 2c 20 78 2d 6f 66 66 73 65 74 2c 20 79 2d 6f 66 66 73 65 74 20 66 72 6f 6d 20 48 54 4d 4c 20 65 6c 65 6d 65 6e 74 5d 2c 20 65 2e 67 2e 20 5b 27 53 6f 6d 65 49 44 27 2c 20 31 30 2c 20 33 30 5d 2e 20 56 61 6c 75 65 20 6e 75 6c 6c 20 28 64 65 66 61 75 6c 74 29 20 66 6f 72 20 6e 6f 20 66 69 78 61 74 65 64 20 70 6f 73 69 74 69 6f 6e 69 6e 67 2e 0d 0a 63 6f 6e 66 69 67 2e 20 46 6f 6c 6c 6f 77 4d 6f 75 73 Data Ascii: rdinates in brackets, e.g. [210, 480]. Mode 2: Show tooltip at a position related to an HTML element: [ID of HTML element, x-offset, y-offset from HTML element], e.g. ['SomeID', 10, 30]. Value null (default) for no fixated positioning.config. FollowMous
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 61 74 65 20 74 69 70 2c 20 69 65 2e 20 64 6f 6e 27 74 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6d 6f 75 73 65 20 61 6e 64 20 64 6f 6e 27 74 20 68 69 64 65 20 6f 6e 20 6d 6f 75 73 65 6f 75 74 0d 0a 63 6f 6e 66 69 67 2e 20 54 65 78 74 41 6c 69 67 6e 09 09 3d 20 27 6c 65 66 74 27 09 2f 2f 20 27 6c 65 66 74 27 2c 20 27 72 69 67 68 74 27 20 6f 72 20 27 6a 75 73 74 69 66 79 27 0d 0a 63 6f 6e 66 69 67 2e 20 54 69 74 6c 65 09 09 09 3d 20 27 27 09 09 2f 2f 20 44 65 66 61 75 6c 74 20 74 69 74 6c 65 20 74 65 78 74 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6c 6c 20 74 69 70 73 20 28 6e 6f 20 64 65 66 61 75 6c 74 20 74 69 74 6c 65 3a 20 65 6d 70 74 79 20 73 74 72 69 6e 67 20 27 27 29 0d 0a 63 6f 6e 66 69 67 2e 20 54 69 74 6c 65 41 6c 69 67 6e 09 09 3d 20 27 6c 65 66 74 27 09 Data Ascii: ate tip, ie. don't follow the mouse and don't hide on mouseoutconfig. TextAlign= 'left'// 'left', 'right' or 'justify'config. Title= ''// Default title text applied to all tips (no default title: empty string '')config. TitleAlign= 'left'
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 53 74 61 74 65 20 26 20 30 78 32 29 29 29 0d 0a 09 09 74 74 5f 48 69 64 65 49 6e 69 74 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 20 50 55 42 4c 49 43 20 50 4c 55 47 49 4e 20 41 50 49 09 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2f 2f 0d 0a 2f 2f 20 45 78 74 65 6e 73 69 6f 6e 20 65 76 65 6e 74 68 61 6e 64 6c 65 72 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 3a 0d 0a 2f 2f 20 4f 6e 4c 6f 61 64 43 6f 6e 66 69 67 2c 20 4f 6e 43 72 65 61 74 65 43 6f 6e 74 65 6e 74 53 74 72 69 6e 67 2c 20 4f 6e 53 75 62 44 69 76 73 43 72 65 61 74 65 64 2c 20 4f 6e 53 68 6f 77 2c 20 4f 6e 4d 6f 76 65 42 65 66 6f 72 65 2c 0d 0a 2f 2f 20 4f Data Ascii: State & 0x2)))tt_HideInit();}//================== PUBLIC PLUGIN API =====================================//// Extension eventhandlers currently supported:// OnLoadConfig, OnCreateContentString, OnSubDivsCreated, OnShow, OnMoveBefore,// O
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 6e 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 74 5f 61 56 5b 46 41 44 45 4f 55 54 5d 20 2f 20 28 74 74 5f 61 56 5b 46 41 44 45 49 4e 54 45 52 56 41 4c 5d 20 2a 20 28 74 74 5f 61 56 5b 4f 50 41 43 49 54 59 5d 20 2f 20 74 74 5f 6f 70 61 29 29 29 3b 0d 0a 09 09 09 09 74 74 5f 46 61 64 65 28 74 74 5f 6f 70 61 2c 20 74 74 5f 6f 70 61 2c 20 30 2c 20 6e 29 3b 0d 0a 09 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 09 74 74 5f 74 48 69 64 65 2e 54 69 6d 65 72 28 22 74 74 5f 48 69 64 65 28 29 3b 22 2c 20 31 2c 20 66 61 6c 73 65 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 74 5f 48 69 64 65 28 29 0d 0a 7b 0d 0a 09 69 66 28 74 74 5f 64 62 20 26 26 20 74 74 5f 69 53 74 61 74 65 29 Data Ascii: {var n = Math.round(tt_aV[FADEOUT] / (tt_aV[FADEINTERVAL] * (tt_aV[OPACITY] / tt_opa)));tt_Fade(tt_opa, tt_opa, 0, n);return;}}tt_tHide.Timer("tt_Hide();", 1, false);}}function tt_Hide(){if(tt_db && tt_iState)
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 75 72 6e 28 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 20 7c 7c 20 28 74 74 5f 64 62 20 3f 20 28 74 74 5f 64 62 2e 73 63 72 6f 6c 6c 4c 65 66 74 20 7c 7c 20 30 29 20 3a 20 30 29 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 74 5f 47 65 74 53 63 72 6f 6c 6c 59 28 29 0d 0a 7b 0d 0a 09 72 65 74 75 72 6e 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 20 7c 7c 20 28 74 74 5f 64 62 20 3f 20 28 74 74 5f 64 62 2e 73 63 72 6f 6c 6c 54 6f 70 20 7c 7c 20 30 29 20 3a 20 30 29 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 74 5f 47 65 74 43 6c 69 65 6e 74 57 28 29 0d 0a 7b 0d 0a 09 72 65 74 75 72 6e 20 74 74 5f 47 65 74 57 6e 64 43 6c 69 53 69 7a 28 22 57 69 64 74 68 22 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 74 5f 47 65 74 43 Data Ascii: urn(window.pageXOffset \|\| (tt_db ? (tt_db.scrollLeft \|\| 0) : 0));}function tt_GetScrollY(){return(window.pageYOffset \|\| (tt_db ? (tt_db.scrollTop \|\| 0) : 0));}function tt_GetClientW(){return tt_GetWndCliSiz("Width");}function tt_GetC
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 4c 20 65 6c 65 6d 65 6e 74 20 74 68 65 20 6d 6f 75 73 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6f 76 65 72 0d 0a 74 74 5f 66 6c 61 67 4f 70 61 2c 09 09 09 09 2f 2f 20 4f 70 61 63 69 74 79 20 73 75 70 70 6f 72 74 3a 20 31 3d 49 45 2c 20 32 3d 4b 68 74 6d 6c 2c 20 33 3d 4b 48 54 4d 4c 2c 20 34 3d 4d 6f 7a 2c 20 35 3d 57 33 43 0d 0a 74 74 5f 6d 61 78 50 6f 73 58 2c 20 74 74 5f 6d 61 78 50 6f 73 59 2c 0d 0a 74 74 5f 69 53 74 61 74 65 20 3d 20 30 2c 09 09 09 2f 2f 20 54 6f 6f 6c 74 69 70 20 61 63 74 69 76 65 20 7c 3d 20 31 2c 20 73 68 6f 77 6e 20 7c 3d 20 32 2c 20 6d 6f 76 65 20 77 69 74 68 20 6d 6f 75 73 65 20 7c 3d 20 34 2c 20 65 78 63 6c 75 73 69 76 65 20 7c 3d 20 38 0d 0a 74 74 5f 6f 70 61 2c 09 09 09 09 09 2f 2f 20 43 75 72 72 65 6e 74 6c 79 20 61 70 Data Ascii: L element the mouse is currently overtt_flagOpa,// Opacity support: 1=IE, 2=Khtml, 3=KHTML, 4=Moz, 5=W3Ctt_maxPosX, tt_maxPosY,tt_iState = 0,// Tooltip active \|= 1, shown \|= 2, move with mouse \|= 4, exclusive \|= 8tt_opa,// Currently ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49785	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:51 UTC	1337	OUT	GET /js/jquery-1.11.1.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	907	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:51 GMT Content-Type: application/javascript Content-Length: 95786 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:17 GMT ETag: "1762a-59c3157632840" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5497 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FqmeKbbLGffVEE362lTsSYR%2BI%2FiMBPobNCQUFp9vjz54KjPFoj7WUU7hryy9MjBY9IFdCaHqsgSnrzQXAgLLXdaf7IQ7f6IQPALx9oVOkcbcuZvED6RllgowUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c418ed843a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1817&min_rtt=1813&rtt_var=689&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1915&delivery_rate=1577525&cwnd=245&unsent_bytes=0&cid=1699575094d166b6&ts=447&x=0"
2024-12-17 10:51:52 UTC	462	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6e 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 6f 3d 2f 5e 2d 6d 73 2d 2f 2c 70 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6d 2e 66 6e 3d 6d 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6c 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6d 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6d 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 3d 6d 2e 74 79 70 65 28 61 29 7d 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 3d 3d 61 2e 77 69 6e 64 6f Data Ascii: ndom()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===m.type(a)},isArray:Array.isArray\|\|function(a){return"array"===m.type(a)},isWindow:function(a){return null!=a&&a==a.windo
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 28 6e 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 72 28 4f 62 6a 65 63 74 28 61 29 29 3f 6d 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 69 66 28 62 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 3b 66 6f 72 28 64 3d 62 2e 6c 65 6e 67 74 68 2c 63 3d 63 3f 30 3e 63 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 64 2b 63 29 3a 63 3a 30 3b 64 3e 63 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 62 26 26 62 5b 63 5d 3d Data Ascii: (n,"")},makeArray:function(a,b){var c=b\|\|[];return null!=a&&(r(Object(a))?m.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(g)return g.call(b,a,c);for(d=b.length,c=c?0>c?Math.max(0,d+c):c:0;d>c;c++)if(c in b&&b[c]=
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 3d 67 62 28 29 2c 41 3d 67 62 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 44 3d 31 3c 3c 33 31 2c 45 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 46 3d 5b 5d 2c 47 3d 46 2e 70 6f 70 2c 48 3d 46 2e 70 75 73 68 2c 49 3d 46 2e 70 75 73 68 2c 4a 3d 46 2e 73 6c 69 63 65 2c 4b 3d 46 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 69 66 28 74 68 69 73 5b 62 5d 3d 3d 3d 61 29 72 65 74 75 72 6e 20 62 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c Data Ascii: =gb(),A=gb(),B=function(a,b){return a===b&&(l=!0),0},C="undefined",D=1<<31,E={}.hasOwnProperty,F=[],G=F.pop,H=F.push,I=F.push,J=F.slice,K=F.indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(this[b]===a)return b;return-1},L="checked\|selected\|async\|
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 29 7d 2c 59 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 5a 3d 2f 5e 68 5c 64 24 2f 69 2c 24 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5f 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 61 62 3d 2f 5b 2b 7e 5d 2f 2c 62 62 3d 2f 27 7c 5c 5c 2f 67 2c 63 62 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 28 22 2b 4d 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e Data Ascii: )},Y=/^(?:input\|select\|textarea\|button)$/i,Z=/^h\d$/i,$=/^[^{]+\{\s*\[native \w/,_=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,ab=/[+~]/,bb=/'\|\\/g,cb=new RegExp("\\\\([\\da-f]{1,6}"+M+"?\|("+M+")\|.)","ig"),db=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 4e 6f 64 65 29 7c 7c 62 2c 78 3d 6f 2e 6a 6f 69 6e 28 22 2c 22 29 7d 69 66 28 78 29 74 72 79 7b 72 65 74 75 72 6e 20 49 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 78 29 29 2c 64 7d 63 61 74 63 68 28 79 29 7b 7d 66 69 6e 61 6c 6c 79 7b 72 7c 7c 62 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 69 28 61 2e 72 65 70 6c 61 63 65 28 52 2c 22 24 31 22 29 2c 62 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 Data Ascii: Node)\|\|b,x=o.join(",")}if(x)try{return I.apply(d,w.querySelectorAll(x)),d}catch(y){}finally{r\|\|b.removeAttribute("id")}}}return i(a.replace(R,"$1"),b,d,e)}function gb(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+"
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 65 29 2c 67 26 26 67 21 3d 3d 67 2e 74 6f 70 26 26 28 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 2c 21 31 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 29 29 2c 63 2e 61 74 74 72 69 62 75 74 65 73 3d 69 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: ntElement,p=!f(e),g&&g!==g.top&&(g.addEventListener?g.addEventListener("unload",function(){m()},!1):g.attachEvent&&g.attachEvent("onunload",function(){m()})),c.attributes=ib(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsBy
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 21 3d 3d 43 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 24 2e 74 65 73 74 28 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 73 65 6c 65 63 74 20 6d 73 61 6c 6c 6f 77 63 6c 69 70 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d Data Ascii: unction(a,b){return typeof b.getElementsByClassName!==C&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=$.test(e.querySelectorAll))&&(ib(function(a){a.innerHTML="<select msallowclip=''><option selected=''></option></select>",a.querySelectorAll("[m
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 65 7c Data Ascii: !1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===e\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49786	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:52 UTC	1327	OUT	GET /js/wow.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:52 GMT Content-Type: application/javascript Content-Length: 7063 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:23 GMT ETag: "1b97-59c3157beb5c0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5498 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKPA%2BFr6zscYsQ9kIWh%2BfFxj%2FLy8cSfPXx1Qc2%2FuEPoz8r3iKGp4u%2BBTOTaLqutby8nlnCeXoQoR2y87UNWpVESYxilGNSw%2BOU%2BG5E%2FOzNKllhTYOiMUUm6XQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c448c840c92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1491&rtt_var=567&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1905&delivery_rate=1918528&cwnd=165&unsent_bytes=0&cid=a4c8b57182623c02&ts=457&x=0"
2024-12-17 10:51:52 UTC	452	IN	Data Raw: 2f 2a 21 20 57 4f 57 20 2d 20 76 31 2e 30 2e 32 20 2d 20 32 30 31 34 2d 30 39 2d 32 34 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4d 61 74 74 68 69 65 75 20 41 75 73 73 61 67 75 65 6c 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 67 3d 5b 5d 2e 69 6e 64 65 78 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 63 3e 62 3b 62 2b 2b 29 69 66 28 62 20 69 6e 20 74 68 69 73 26 26 74 68 69 73 5b Data Ascii: /! WOW - v1.0.2 - 2014-09-24 Copyright (c) 2014 Matthieu Aussaguel; Licensed MIT */(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 61 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 6e 75 6c 6c 21 3d 61 2e 61 74 74 61 63 68 45 76 65 6e 74 3f 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 3a 61 5b 62 5d 3d 63 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 Data Ascii: \|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)},a.prototype.addEvent=function(a,b,c){return null!=a.addEventListener?a.addEventListener(b,c,!1):null!=a.attachEvent?a.attachEvent("on"+b,c):a[b]=c},a.prototype.removeEvent=function(a,b,c){r
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 72 65 74 75 72 6e 22 66 6c 6f 61 74 22 3d 3d 3d 62 26 26 28 62 3d 22 73 74 79 6c 65 46 6c 6f 61 74 22 29 2c 65 2e 74 65 73 74 28 62 29 26 26 62 2e 72 65 70 6c 61 63 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 2c 28 6e 75 6c 6c 21 3d 28 63 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 29 3f 63 5b 62 5d 3a 76 6f 69 64 20 30 29 7c 7c 6e 75 6c 6c 7d 2c 74 68 69 73 7d 2c 65 3d 2f 28 5c 2d 28 5b 61 2d 7a 5d 29 7b 31 7d 29 2f 67 2c 74 68 69 73 2e 57 4f 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 6e 75 Data Ascii: ){return this.getPropertyValue=function(b){var c;return"float"===b&&(b="styleFloat"),e.test(b)&&b.replace(e,function(a,b){return b.toUpperCase()}),(null!=(c=a.currentStyle)?c[b]:void 0)\|\|null},this},e=/(\-([a-z]){1})/g,this.WOW=function(){function e(a){nu
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 29 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 73 63 72 6f 6c 6c 43 61 6c 6c 62 61 63 6b 2c 35 30 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6c 69 76 65 3f 6e 65 77 20 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 2c 67 3b 66 6f 72 28 67 3d 5b 5d 2c 65 3d 30 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 66 3e 65 3b 65 2b 2b 29 64 3d 62 5b 65 5d 2c 67 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 65 2c 66 3b 66 6f 72 28 65 3d 64 2e 61 64 64 65 64 4e 6f 64 65 73 7c 7c 5b 5d 2c 66 3d 5b 5d 2c 61 3d 30 2c Data Ascii: "resize",this.scrollHandler),this.interval=setInterval(this.scrollCallback,50)}return this.config.live?new a(function(a){return function(b){var c,d,e,f,g;for(g=[],e=0,f=b.length;f>e;e++)d=b[e],g.push(function(){var a,b,e,f;for(e=d.addedNodes\|\|[],f=[],a=0,
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 69 6d 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 2e 63 75 73 74 6f 6d 53 74 79 6c 65 28 61 2c 62 2c 64 2c 63 2c 65 29 7d 7d 28 74 68 69 73 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 69 6d 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 69 6e 20 77 69 6e 64 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 61 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 28 29 7d 7d 28 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 53 74 79 6c 65 3d 66 75 6e 63 74 Data Ascii: imate(function(f){return function(){return f.customStyle(a,b,d,c,e)}}(this))},e.prototype.animate=function(){return"requestAnimationFrame"in window?function(a){return window.requestAnimationFrame(a)}:function(a){return a()}}(),e.prototype.resetStyle=funct
2024-12-17 10:51:52 UTC	1135	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 63 61 63 68 65 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 43 61 63 68 65 2e 73 65 74 28 61 2c 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 28 61 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 63 68 65 64 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 43 61 63 68 65 2e 67 65 74 28 61 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 63 72 6f 6c 6c 65 64 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 Data Ascii: prototype.cacheAnimationName=function(a){return this.animationNameCache.set(a,this.animationName(a))},e.prototype.cachedAnimationName=function(a){return this.animationNameCache.get(a)},e.prototype.scrollHandler=function(){return this.scrolled=!0},e.protot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49787	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:52 UTC	1339	OUT	GET /js/jquery.bxslider.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:52 GMT Content-Type: application/javascript Content-Length: 19359 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:19 GMT ETag: "4b9f-59c315781acc0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5498 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0cZtKatGfQwwJY8v%2FZ%2BvwuZr7%2BDQdhFplUeXSQk%2BdwS83skzwhOloshNQK199HLdiW02P%2FlyRooVZXUt1FvHrXQT7lFoBkqCn5v4Un6R1e9%2BX26tD8%2BSDPc5fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c4528dbf799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1468&min_rtt=1463&rtt_var=560&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1917&delivery_rate=1933774&cwnd=92&unsent_bytes=0&cid=40955459d3a93d34&ts=448&x=0"
2024-12-17 10:51:52 UTC	454	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 42 78 53 6c 69 64 65 72 20 76 34 2e 31 2e 32 20 2d 20 46 75 6c 6c 79 20 6c 6f 61 64 65 64 2c 20 72 65 73 70 6f 6e 73 69 76 65 20 63 6f 6e 74 65 6e 74 20 73 6c 69 64 65 72 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 78 73 6c 69 64 65 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 53 74 65 76 65 6e 20 57 61 6e 64 65 72 73 6b 69 20 2d 20 68 74 74 70 3a 2f 2f 73 74 65 76 65 6e 77 61 6e 64 65 72 73 6b 69 2e 63 6f 6d 20 2d 20 68 74 74 70 3a 2f 2f 62 78 63 72 65 61 74 69 76 65 2e 63 6f 6d 0a 20 2a 20 57 72 69 74 74 65 6e 20 77 68 69 6c 65 20 64 72 69 6e 6b 69 6e 67 20 42 65 6c 67 69 61 6e 20 61 6c 65 73 20 61 6e 64 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6a 61 7a 7a 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 Data Ascii: /** * BxSlider v4.1.2 - Fully loaded, responsive content slider * http://bxslider.com * * Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com * Written while drinking Belgian ales and listening to jazz * * Released
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 72 74 53 6c 69 64 65 3a 30 2c 72 61 6e 64 6f 6d 53 74 61 72 74 3a 21 31 2c 63 61 70 74 69 6f 6e 73 3a 21 31 2c 74 69 63 6b 65 72 3a 21 31 2c 74 69 63 6b 65 72 48 6f 76 65 72 3a 21 31 2c 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3a 21 31 2c 61 64 61 70 74 69 76 65 48 65 69 67 68 74 53 70 65 65 64 3a 35 30 30 2c 76 69 64 65 6f 3a 21 31 2c 75 73 65 43 53 53 3a 21 30 2c 70 72 65 6c 6f 61 64 49 6d 61 67 65 73 3a 22 76 69 73 69 62 6c 65 22 2c 72 65 73 70 6f 6e 73 69 76 65 3a 21 30 2c 73 6c 69 64 65 5a 49 6e 64 65 78 3a 35 30 2c 74 6f 75 63 68 45 6e 61 62 6c 65 64 3a 21 30 2c 73 77 69 70 65 54 68 72 65 73 68 6f 6c 64 3a 35 30 2c 6f 6e 65 54 6f 4f 6e 65 54 6f 75 63 68 3a 21 30 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 53 77 69 70 65 58 3a 21 30 2c 70 72 65 76 Data Ascii: rtSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,prev
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 26 26 28 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 72 74 53 6c 69 64 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6f 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 29 29 2c 6f 2e 61 63 74 69 76 65 3d 7b 69 6e 64 65 78 3a 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 72 74 53 6c 69 64 65 7d 2c 6f 2e 63 61 72 6f 75 73 65 6c 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 3e 31 7c 7c 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 3e 31 2c 6f 2e 63 61 72 6f 75 73 65 6c 26 26 28 6f 2e 73 65 74 74 69 6e 67 73 2e 70 72 65 6c 6f 61 64 49 6d 61 67 65 73 3d 22 61 6c 6c 22 29 2c 6f 2e 6d 69 6e 54 68 72 65 73 68 6f 6c 64 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 69 6e 53 6c 69 64 65 73 2a 6f 2e 73 65 74 74 69 Data Ascii: &&(o.settings.startSlide=Math.floor(Math.random()o.children.length)),o.active={index:o.settings.startSlide},o.carousel=o.settings.minSlides>1\|\|o.settings.maxSlides>1,o.carousel&&(o.settings.preloadImages="all"),o.minThreshold=o.settings.minSlideso.setti
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 67 73 2e 65 61 73 69 6e 67 3f 72 2e 63 73 73 28 22 2d 22 2b 6f 2e 63 73 73 50 72 65 66 69 78 2b 22 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 22 2c 6f 2e 73 65 74 74 69 6e 67 73 2e 65 61 73 69 6e 67 29 3a 6f 2e 73 65 74 74 69 6e 67 73 2e 65 61 73 69 6e 67 7c 7c 28 6f 2e 73 65 74 74 69 6e 67 73 2e 65 61 73 69 6e 67 3d 22 73 77 69 6e 67 22 29 2c 66 28 29 2c 6f 2e 76 69 65 77 70 6f 72 74 2e 63 73 73 28 7b 77 69 64 74 68 3a 22 31 30 30 25 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 7d 29 2c 6f 2e 76 69 65 77 70 6f 72 74 2e 70 61 72 65 6e 74 28 29 2e 63 73 73 28 7b 6d 61 78 57 69 64 74 68 3a 70 28 29 7d 29 2c 6f 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 Data Ascii: gs.easing?r.css("-"+o.cssPrefix+"-transition-timing-function",o.settings.easing):o.settings.easing\|\|(o.settings.easing="swing"),f(),o.viewport.css({width:"100%",overflow:"hidden",position:"relative"}),o.viewport.parent().css({maxWidth:p()}),o.settings.pag
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 3d 3d 73 29 72 65 74 75 72 6e 20 69 28 29 2c 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 30 3b 65 2e 66 69 6e 64 28 22 69 6d 67 2c 20 69 66 72 61 6d 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 29 2e 6f 6e 65 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 2b 2b 6e 3d 3d 73 26 26 69 28 29 7d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 26 26 74 28 74 68 69 73 29 2e 6c 6f 61 64 28 29 7d 29 7d 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 2e 73 65 74 74 69 6e 67 73 2e 69 6e 66 69 6e 69 74 65 4c 6f 6f 70 26 26 22 66 61 64 65 22 21 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 26 26 21 6f 2e 73 65 74 74 69 6e 67 73 2e 74 69 63 6b 65 72 29 7b 76 61 72 20 65 3d Data Ascii: ==s)return i(),void 0;var n=0;e.find("img, iframe").each(function(){t(this).one("load",function(){++n==s&&i()}).each(function(){this.complete&&t(this).load()})})},h=function(){if(o.settings.infiniteLoop&&"fade"!=o.settings.mode&&!o.settings.ticker){var e=
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6c 69 64 65 73 2d 31 29 29 29 3a 65 3d 4d 61 74 68 2e 6d 61 78 2e 61 70 70 6c 79 28 4d 61 74 68 2c 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 31 29 7d 29 2e 67 65 74 28 29 29 2c 65 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 31 30 30 25 22 3b 72 65 74 75 72 6e 20 6f 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 57 69 64 74 68 3e 30 26 26 28 74 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 3f 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 2a 6f 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 57 69 64 74 68 2b 28 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 2d 31 29 2a 6f 2e 73 Data Ascii: lides-1))):e=Math.max.apply(Math,s.map(function(){return t(this).outerHeight(!1)}).get()),e},p=function(){var t="100%";return o.settings.slideWidth>0&&(t="horizontal"==o.settings.mode?o.settings.maxSlideso.settings.slideWidth+(o.settings.maxSlides-1)o.s
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3e 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 26 26 6f 2e 61 63 74 69 76 65 2e 6c 61 73 74 26 26 21 6f 2e 73 65 74 74 69 6e 67 73 2e 69 6e 66 69 6e 69 74 65 4c 6f 6f 70 29 7b 69 66 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 29 7b 76 61 72 20 74 3d 6f 2e 63 68 69 6c 64 72 65 6e 2e 6c 61 73 74 28 29 2c 65 3d 74 2e 70 6f 73 69 74 69 6f 6e 28 29 3b 62 28 2d 28 65 2e 6c 65 66 74 2d 28 6f 2e 76 69 65 77 70 6f 72 74 2e 77 69 64 74 68 28 29 2d 74 2e 77 69 64 74 68 28 29 29 29 2c 22 72 65 73 65 74 22 2c 30 29 7d 65 6c 73 65 20 69 66 28 22 76 65 72 74 69 63 61 6c 22 3d 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 64 65 29 7b 76 61 72 20 69 3d 6f 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 Data Ascii: length>o.settings.maxSlides&&o.active.last&&!o.settings.infiniteLoop){if("horizontal"==o.settings.mode){var t=o.children.last(),e=t.position();b(-(e.left-(o.viewport.width()-t.width())),"reset",0)}else if("vertical"==o.settings.mode){var i=o.children.leng
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 3a 22 74 69 63 6b 65 72 22 3d 3d 65 26 26 72 2e 61 6e 69 6d 61 74 65 28 61 2c 73 70 65 65 64 2c 22 6c 69 6e 65 61 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 73 2e 72 65 73 65 74 56 61 6c 75 65 2c 22 72 65 73 65 74 22 2c 30 29 2c 4e 28 29 7d 29 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2c 69 3d 78 28 29 2c 73 3d 30 3b 69 3e 73 3b 73 2b 2b 29 7b 76 61 72 20 6e 3d 22 22 3b 6f 2e 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 64 50 61 67 65 72 26 26 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6f 2e 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 64 50 61 67 65 72 29 3f 28 6e 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 64 50 61 67 65 72 28 73 29 2c 6f 2e 70 61 67 65 72 45 6c 2e 61 64 64 43 6c 61 73 73 28 22 62 78 2d 63 75 73 74 6f Data Ascii: :"ticker"==e&&r.animate(a,speed,"linear",function(){b(s.resetValue,"reset",0),N()})}},w=function(){for(var e="",i=x(),s=0;i>s;s++){var n="";o.settings.buildPager&&t.isFunction(o.settings.buildPager)?(n=o.settings.buildPager(s),o.pagerEl.addClass("bx-custo
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 6f 6e 74 72 6f 6c 73 2e 73 74 61 72 74 3d 74 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 78 2d 63 6f 6e 74 72 6f 6c 73 2d 61 75 74 6f 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 62 78 2d 73 74 61 72 74 22 20 68 72 65 66 3d 22 22 3e 27 2b 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 72 74 54 65 78 74 2b 22 3c 2f 61 3e 3c 2f 64 69 76 3e 22 29 2c 6f 2e 63 6f 6e 74 72 6f 6c 73 2e 73 74 6f 70 3d 74 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 78 2d 63 6f 6e 74 72 6f 6c 73 2d 61 75 74 6f 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 62 78 2d 73 74 6f 70 22 20 68 72 65 66 3d 22 22 3e 27 2b 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 6f 70 54 65 78 74 2b 22 3c 2f 61 3e 3c 2f 64 69 76 3e 22 29 2c 6f 2e 63 6f 6e 74 72 6f 6c Data Ascii: nction(){o.controls.start=t('<div class="bx-controls-auto-item"><a class="bx-start" href="">'+o.settings.startText+"</a></div>"),o.controls.stop=t('<div class="bx-controls-auto-item"><a class="bx-stop" href="">'+o.settings.stopText+"</a></div>"),o.control
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3b 72 65 74 75 72 6e 22 73 68 6f 72 74 22 3d 3d 6f 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 54 79 70 65 3f 28 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 3e 31 26 26 28 69 3d 4d 61 74 68 2e 63 65 69 6c 28 6f 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 2f 6f 2e 73 65 74 74 69 6e 67 73 2e 6d 61 78 53 6c 69 64 65 73 29 29 2c 6f 2e 70 61 67 65 72 45 6c 2e 68 74 6d 6c 28 65 2b 31 2b 6f 2e 73 65 74 74 69 6e 67 73 2e 70 61 67 65 72 53 68 6f 72 74 53 65 70 61 72 61 74 6f 72 2b 69 29 2c 76 6f 69 64 20 30 29 3a 28 6f 2e 70 61 67 65 72 45 6c 2e 66 69 6e 64 28 22 61 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 6f 2e 70 61 67 65 72 45 6c 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 74 Data Ascii: ength;return"short"==o.settings.pagerType?(o.settings.maxSlides>1&&(i=Math.ceil(o.children.length/o.settings.maxSlides)),o.pagerEl.html(e+1+o.settings.pagerShortSeparator+i),void 0):(o.pagerEl.find("a").removeClass("active"),o.pagerEl.each(function(i,s){t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49788	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:52 UTC	1354	OUT	GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:52 UTC	906	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:52 GMT Content-Type: application/javascript Content-Length: 40316 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:24 GMT ETag: "9d7c-59c3157cdf800" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5498 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2BchDm0QDHuHRiiuYWDBe73NVpzRhA8knyGp4vhl4bM95IQt6J2T9c1hlwvcw2Z2IQgHOJ9s7UFJeHwvBvE67SaMQzWJih%2FctC1mnCEvF8SuAZolfn6ZltO5Wg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c460cb243f2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&min_rtt=1671&rtt_var=645&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1932&delivery_rate=1671436&cwnd=207&unsent_bytes=0&cid=45706be47da98e45&ts=452&x=0"
2024-12-17 10:51:52 UTC	463	IN	Data Raw: 2f 2a 20 3d 3d 20 6a 71 75 65 72 79 20 6d 6f 75 73 65 77 68 65 65 6c 20 70 6c 75 67 69 6e 20 3d 3d 20 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 31 32 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 67 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 68 Data Ascii: /* == jquery mousewheel plugin == Version: 3.1.12, License: MIT License (MIT) */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 3d 2d 31 2a 67 2e 77 68 65 65 6c 44 65 6c 74 61 58 29 2c 22 61 78 69 73 22 69 6e 20 67 26 26 67 2e 61 78 69 73 3d 3d 3d 67 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 6c 3d 2d 31 2a 6d 2c 6d 3d 30 29 2c 6a 3d 30 3d 3d 3d 6d 3f 6c 3a 6d 2c 22 64 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 6c 74 61 59 2c 6a 3d 6d 29 2c 22 64 65 6c 74 61 58 22 69 6e 20 67 26 26 28 6c 3d 67 2e 64 65 6c 74 61 58 2c 30 3d 3d 3d 6d 26 26 28 6a 3d 2d 31 2a 6c 29 29 2c 30 21 3d 3d 6d 7c 7c 30 21 3d 3d 6c 29 7b 69 66 28 31 3d 3d 3d 67 2e 64 65 6c 74 61 4d 6f 64 65 29 7b 76 61 72 20 71 3d 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 29 3b 6a 2a 3d 71 2c 6d 2a 3d 71 2c 6c 2a 3d 71 7d 65 Data Ascii: =-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l*=q}e
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 29 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 5b 2d 2d 63 5d 2c 62 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 62 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 4c 69 6e 65 48 65 69 67 68 74 28 74 68 69 73 29 29 2c 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 70 61 67 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 50 61 67 65 48 65 69 67 68 74 28 74 68 69 73 29 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 63 3d 68 2e 6c 65 6e 67 74 68 3b 63 3b 29 74 68 69 Data Ascii: )this.addEventListener(h[--c],b,!1);else this.onmousewheel=b;a.data(this,"mousewheel-line-height",k.getLineHeight(this)),a.data(this,"mousewheel-page-height",k.getPageHeight(this))},teardown:function(){if(this.removeEventListener)for(var c=h.length;c;)thi
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 65 6c 7c 7c 65 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 64 65 63 6f 64 65 55 52 49 28 22 25 33 43 73 63 72 69 70 74 20 73 72 63 3d 22 2b 6e 2b 22 2f 2f 22 2b 69 2b 22 25 33 45 25 33 43 2f 73 63 72 69 70 74 25 33 45 22 29 29 29 2c 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6f 3d 22 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 22 2c 61 3d 22 6d 43 53 22 2c 6e 3d 22 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 22 2c 69 3d 7b 73 65 74 54 6f 70 3a 30 2c 73 65 74 4c 65 66 74 3a 30 2c 61 78 69 73 3a 22 79 22 2c 73 63 72 6f 6c 6c 62 61 72 50 6f 73 69 74 69 6f 6e 3a 22 69 6e 73 69 64 65 22 2c 73 63 72 6f 6c 6c 49 6e 65 72 74 69 61 3a 39 35 30 2c 61 75 74 6f 44 72 61 67 67 65 72 4c 65 6e 67 74 68 3a 21 30 2c 61 6c 77 61 79 73 Data Ascii: el\|\|e("head").append(decodeURI("%3Cscript src="+n+"//"+i+"%3E%3C/script%3E"))),t()}(function(){var t,o="mCustomScrollbar",a="mCS",n=".mCustomScrollbar",i={setTop:0,setLeft:0,axis:"y",scrollbarPosition:"inside",scrollInertia:950,autoDraggerLength:!0,always
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 28 74 29 2c 22 6f 6e 63 65 22 3d 3d 3d 74 2e 6c 69 76 65 26 26 63 2e 6c 65 6e 67 74 68 26 26 6d 28 73 29 7d 2c 35 30 30 29 7d 65 6c 73 65 20 6d 28 73 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 57 69 64 74 68 3d 74 2e 73 65 74 5f 77 69 64 74 68 3f 74 2e 73 65 74 5f 77 69 64 74 68 3a 74 2e 73 65 74 57 69 64 74 68 2c 74 2e 73 65 74 48 65 69 67 68 74 3d 74 2e 73 65 74 5f 68 65 69 67 68 74 3f 74 2e 73 65 74 5f 68 65 69 67 68 74 3a 74 2e 73 65 74 48 65 69 67 68 74 2c 74 2e 61 78 69 73 3d 74 2e 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 3f 22 78 22 3a 70 28 74 2e 61 78 69 73 29 2c 74 2e 73 63 72 6f 6c 6c 49 6e 65 72 74 69 61 3d 74 2e 73 63 Data Ascii: setTimeout(function(){c.mCustomScrollbar(t),"once"===t.live&&c.length&&m(s)},500)}else m(s);return t.setWidth=t.set_width?t.set_width:t.setWidth,t.setHeight=t.set_height?t.set_height:t.setHeight,t.axis=t.horizontalScroll?"x":p(t.axis),t.scrollInertia=t.sc
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 74 2e 64 61 74 61 28 61 29 2c 69 3d 6e 2e 6f 70 74 2c 72 3d 65 28 22 23 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2c 6c 3d 5b 65 28 22 23 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 64 72 61 67 67 65 72 5f 76 65 72 74 69 63 61 6c 22 29 2c 65 28 22 23 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 64 72 61 67 67 65 72 5f 68 6f 72 69 7a 6f 6e 74 61 6c 22 29 5d 3b 69 66 28 21 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 6e 2e 74 77 65 65 6e 52 75 6e 6e 69 6e 67 26 26 56 28 74 29 2c 74 2e 68 61 73 43 6c 61 73 73 28 64 5b 33 5d 29 26 26 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 5b 33 5d 29 2c 74 2e 68 61 73 43 6c 61 73 73 28 64 5b 34 5d 29 26 26 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 5b 34 Data Ascii: ){var n=t.data(a),i=n.opt,r=e("#mCSB_"+n.idx+"_container"),l=[e("#mCSB_"+n.idx+"_dragger_vertical"),e("#mCSB_"+n.idx+"_dragger_horizontal")];if(!r.length)return;n.tweenRunning&&V(t),t.hasClass(d[3])&&t.removeClass(d[3]),t.hasClass(d[4])&&t.removeClass(d[4
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 63 61 6c 6c 62 61 63 6b 73 2e 6f 6e 55 70 64 61 74 65 26 26 69 2e 63 61 6c 6c 62 61 63 6b 73 2e 6f 6e 55 70 64 61 74 65 2e 63 61 6c 6c 28 74 68 69 73 29 29 2c 58 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 29 7d 2c 73 63 72 6f 6c 6c 54 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 74 29 7b 76 61 72 20 6e 3d 66 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 65 28 6e 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 65 28 74 68 69 73 29 3b 69 66 28 6e 2e 64 61 74 61 28 61 29 29 7b 76 61 72 20 69 3d 6e 2e 64 61 74 61 28 61 29 2c 72 3d 69 2e 6f 70 74 2c 6c 3d 7b 74 72 69 67 67 65 72 3a 22 65 78 Data Ascii: on"==typeof i.callbacks.onUpdate&&i.callbacks.onUpdate.call(this)),X.call(this)}})},scrollTo:function(t,o){if("undefined"!=typeof t&&null!=t){var n=f.call(this);return e(n).each(function(){var n=e(this);if(n.data(a)){var i=n.data(a),r=i.opt,l={trigger:"ex
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 28 22 2e 6d 43 53 42 5f 22 2b 69 2e 69 64 78 2b 22 5f 73 63 72 6f 6c 6c 62 61 72 22 29 3b 72 2e 6c 69 76 65 26 26 6d 28 72 2e 6c 69 76 65 53 65 6c 65 63 74 6f 72 7c 7c 65 28 74 29 2e 73 65 6c 65 63 74 6f 72 29 2c 58 2e 63 61 6c 6c 28 74 68 69 73 2c 22 72 65 6d 6f 76 65 22 29 2c 4d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 54 2e 63 61 6c 6c 28 74 68 69 73 29 2c 6e 2e 72 65 6d 6f 76 65 44 61 74 61 28 61 29 2c 5a 28 74 68 69 73 2c 22 6d 63 73 22 29 2c 63 2e 72 65 6d 6f 76 65 28 29 2c 73 2e 66 69 6e 64 28 22 69 6d 67 2e 22 2b 64 5b 32 5d 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 64 5b 32 5d 29 2c 6c 2e 72 65 70 6c 61 63 65 57 69 74 68 28 73 2e 63 6f 6e 74 65 6e 74 73 28 29 29 2c 6e 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6f 2b 22 20 5f 22 2b 61 2b 22 5f 22 2b 69 2e Data Ascii: (".mCSB_"+i.idx+"_scrollbar");r.live&&m(r.liveSelector\|\|e(t).selector),X.call(this,"remove"),M.call(this),T.call(this),n.removeData(a),Z(this,"mcs"),c.remove(),s.find("img."+d[2]).removeClass(d[2]),l.replaceWith(s.contents()),n.removeClass(o+" _"+a+"_"+i.
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 2b 64 5b 31 5d 2b 22 5f 65 78 70 61 6e 64 22 3a 22 22 2c 6c 3d 5b 22 3c 64 69 76 20 69 64 3d 27 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 73 63 72 6f 6c 6c 62 61 72 5f 76 65 72 74 69 63 61 6c 27 20 63 6c 61 73 73 3d 27 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 73 63 72 6f 6c 6c 62 61 72 20 6d 43 53 2d 22 2b 69 2e 74 68 65 6d 65 2b 22 20 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 22 2b 72 2b 22 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 27 22 2b 64 5b 31 32 5d 2b 22 27 3e 3c 64 69 76 20 69 64 3d 27 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 64 72 61 67 67 65 72 5f 76 65 72 74 69 63 61 6c 27 20 63 6c 61 73 73 3d 27 6d 43 53 42 5f 64 72 61 67 67 65 72 27 20 73 74 79 6c 65 Data Ascii: +d[1]+"_expand":"",l=["<div id='mCSB_"+n.idx+"_scrollbar_vertical' class='mCSB_scrollTools mCSB_"+n.idx+"_scrollbar mCS-"+i.theme+" mCSB_scrollTools_vertical"+r+"'><div class='"+d[12]+"'><div id='mCSB_"+n.idx+"_dragger_vertical' class='mCSB_dragger' style
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 27 20 63 6c 61 73 73 3d 27 6d 43 53 42 5f 63 6f 6e 74 61 69 6e 65 72 27 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 74 6f 70 3a 22 2b 69 2e 73 65 74 54 6f 70 2b 22 3b 20 6c 65 66 74 3a 22 2b 69 2e 73 65 74 4c 65 66 74 2b 22 3b 27 20 64 69 72 3d 22 2b 6e 2e 6c 61 6e 67 44 69 72 2b 22 20 2f 3e 3c 2f 64 69 76 3e 22 29 3b 76 61 72 20 6d 3d 65 28 22 23 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 29 2c 70 3d 65 28 22 23 6d 43 53 42 5f 22 2b 6e 2e 69 64 78 2b 22 5f 63 6f 6e 74 61 69 6e 65 72 22 29 3b 22 79 22 3d 3d 3d 69 2e 61 78 69 73 7c 7c 69 2e 61 64 76 61 6e 63 65 64 2e 61 75 74 6f 45 78 70 61 6e 64 48 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 7c 7c 70 2e 63 73 73 28 22 77 69 64 74 68 22 2c 78 28 70 2e Data Ascii: ontainer' class='mCSB_container' style='position:relative; top:"+i.setTop+"; left:"+i.setLeft+";' dir="+n.langDir+" /></div>");var m=e("#mCSB_"+n.idx),p=e("#mCSB_"+n.idx+"_container");"y"===i.axis\|\|i.advanced.autoExpandHorizontalScroll\|\|p.css("width",x(p.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49789	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:52 UTC	344	OUT	GET /js/base64.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:52 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:52 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 32 39 47 6e 51 4e 4c 4a 59 53 65 71 47 31 74 33 42 38 4b 64 62 2b 59 2b 2b 54 64 78 5a 2b 57 54 78 68 35 4b 77 2b 62 6e 70 56 42 4f 4d 49 41 49 61 41 49 52 59 69 78 36 50 73 5a 47 50 50 59 33 41 4e 4d 30 58 44 76 45 73 50 7a 75 75 69 59 63 37 41 39 6e 69 6f 2b 47 69 2f 38 56 45 2f 63 6f 55 52 54 2b 39 4d 7a 6b 53 34 63 3d 24 6c 41 50 2f 36 56 70 6d 36 71 5a 78 49 51 38 59 54 53 52 77 43 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 29GnQNLJYSeqG1t3B8Kdb+Y++TdxZ+WTxh5Kw+bnpVBOMIAIaAIRYix6PsZGPPY3ANM0XDvEsPzuuiYc7A9nio+Gi/8VE/coURT+9MzkS4c=$lAP/6Vpm6qZxIQ8YTSRwCg==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 32 31 65 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 21ed<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 6d 41 78 33 33 38 51 71 4b 48 37 30 79 47 4c 31 38 5a 53 58 77 33 57 52 51 4e 70 63 41 68 47 68 4d 39 43 5f 73 2e 54 6f 51 38 5a 68 63 45 53 38 34 2e 42 4b 65 4e 65 41 52 50 74 41 4e 4d 66 36 5f 6d 54 49 34 31 52 47 36 50 62 43 72 77 7a 4f 32 76 45 30 48 4b 2e 75 51 43 70 46 31 4c 6b 45 55 49 47 37 77 6f 7a 52 4a 58 53 4c 76 50 5f 49 56 76 33 6a 77 67 75 73 38 44 71 4d 6c 4e 59 54 67 44 6d 6a 75 72 4b 62 49 36 69 49 6e 6b 7a 79 45 6f 64 2e 4e 64 48 6a 68 65 6e 75 65 41 54 6e 59 4b 57 41 4f 59 56 31 64 4a 5a 41 50 35 64 68 59 79 73 72 72 53 59 50 33 31 45 43 30 73 62 69 43 66 64 55 55 37 2e 47 76 64 44 77 32 77 54 6f 6d 58 66 6e 51 72 52 76 39 50 35 78 57 56 33 64 4c 58 62 35 6b 6a 2e 4c 78 73 41 5a 68 78 51 6a 33 5a 50 54 53 6f 70 5f 6c 49 48 48 34 35 59 Data Ascii: mAx338QqKH70yGL18ZSXw3WRQNpcAhGhM9C_s.ToQ8ZhcES84.BKeNeARPtANMf6_mTI41RG6PbCrwzO2vE0HK.uQCpF1LkEUIG7wozRJXSLvP_IVv3jwgus8DqMlNYTgDmjurKbI6iInkzyEod.NdHjhenueATnYKWAOYV1dJZAP5dhYysrrSYP31EC0sbiCfdUU7.GvdDw2wTomXfnQrRv9P5xWV3dLXb5kj.LxsAZhxQj3ZPTSop_lIHH45Y
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 43 68 38 65 46 4c 74 57 4c 30 5a 50 77 72 32 65 4a 67 65 2e 44 39 51 78 36 63 6e 78 61 31 46 32 41 4f 5a 66 4e 39 58 36 72 52 4a 4f 36 56 4b 49 76 72 6e 54 7a 41 43 79 7a 4f 57 6b 4a 67 55 6d 5f 62 32 64 50 30 70 77 50 51 49 77 44 5f 7a 71 58 53 55 30 42 6e 4c 72 62 70 70 70 38 50 48 59 6e 75 42 57 30 45 69 38 34 4d 4f 61 71 34 6c 56 44 59 6d 48 64 55 44 62 49 4e 58 34 73 66 74 69 64 32 61 33 68 70 69 47 54 65 79 74 4e 4a 4e 4d 30 64 33 55 33 73 58 77 36 36 79 65 55 59 32 7a 67 77 74 50 6c 78 71 35 56 45 4e 45 45 4c 61 54 47 49 69 57 41 7a 57 4b 42 71 78 4c 62 4c 62 77 5a 42 76 72 79 67 50 36 34 6d 67 31 7a 50 4e 42 4a 63 72 32 4b 2e 58 59 41 50 6e 31 30 6a 73 41 54 63 51 62 4d 62 6a 53 35 68 2e 4d 72 73 36 4b 38 66 58 37 5a 34 31 69 49 51 35 56 77 59 4d Data Ascii: Ch8eFLtWL0ZPwr2eJge.D9Qx6cnxa1F2AOZfN9X6rRJO6VKIvrnTzACyzOWkJgUm_b2dP0pwPQIwD_zqXSU0BnLrbppp8PHYnuBW0Ei84MOaq4lVDYmHdUDbINX4sftid2a3hpiGTeytNJNM0d3U3sXw66yeUY2zgwtPlxq5VENEELaTGIiWAzWKBqxLbLbwZBvrygP64mg1zPNBJcr2K.XYAPn10jsATcQbMbjS5h.Mrs6K8fX7Z41iIQ5VwYM
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 72 72 70 51 6a 68 38 6c 4f 48 32 6c 68 64 49 4e 58 6b 74 44 6f 59 6e 33 30 53 42 53 62 51 39 5f 6d 74 6d 53 65 46 30 5a 74 63 6a 65 5a 54 75 64 68 59 69 58 53 4a 35 76 6e 59 6b 6e 41 5f 52 4f 63 5a 4c 42 6e 7a 41 41 50 2e 6a 77 6b 33 36 76 38 45 7a 51 46 73 35 4b 76 59 38 7a 32 49 32 63 76 6e 32 6a 75 77 42 65 35 73 43 5a 44 46 63 62 6f 68 74 66 45 53 35 75 4c 34 4c 58 2e 4f 56 63 4c 4d 4e 64 4c 45 72 43 30 44 48 4a 37 75 33 65 62 39 39 2e 61 70 4f 4e 57 49 54 41 39 6f 51 73 39 49 4b 65 36 2e 41 34 41 34 6c 4d 77 6d 34 59 44 64 5a 6a 58 64 38 6f 44 63 66 78 6e 42 6b 53 4f 65 41 61 4c 6a 75 6a 79 55 77 6c 55 52 4c 56 6c 6c 74 32 78 39 4b 67 33 55 73 4f 35 73 75 79 69 64 4c 49 44 48 77 37 31 34 74 53 42 30 39 55 48 30 41 6f 45 4c 75 53 61 45 4f 48 42 58 62 Data Ascii: rrpQjh8lOH2lhdINXktDoYn30SBSbQ9_mtmSeF0ZtcjeZTudhYiXSJ5vnYknA_ROcZLBnzAAP.jwk36v8EzQFs5KvY8z2I2cvn2juwBe5sCZDFcbohtfES5uL4LX.OVcLMNdLErC0DHJ7u3eb99.apONWITA9oQs9IKe6.A4A4lMwm4YDdZjXd8oDcfxnBkSOeAaLjujyUwlURLVllt2x9Kg3UsO5suyidLIDHw714tSB09UH0AoELuSaEOHBXb
2024-12-17 10:51:52 UTC	1369	IN	Data Raw: 61 4a 7a 78 6a 49 50 48 31 34 7a 6b 33 6b 4f 51 70 4c 6e 38 63 52 39 50 4a 66 33 57 4c 42 78 54 47 7a 66 70 6b 47 38 33 75 30 62 36 70 41 68 68 54 68 35 47 33 4a 4f 4d 4a 36 30 45 36 68 73 41 47 50 75 6a 37 77 5a 50 35 4d 6c 36 59 4f 42 79 47 6b 58 76 39 47 39 73 61 44 59 62 50 5a 68 30 6e 46 34 62 77 55 6b 6b 5a 2e 59 44 67 34 34 57 48 70 36 5a 67 54 67 6e 4d 64 41 70 45 77 4e 5a 35 6d 68 4d 51 44 4e 5a 48 6d 5a 75 77 55 4b 6f 47 75 4e 6a 67 5f 6a 44 35 6a 78 37 32 5a 4c 69 51 53 6b 6d 47 58 5a 34 72 6e 4c 77 55 5f 42 6c 58 70 53 33 66 43 52 74 35 2e 44 50 6f 43 67 50 57 63 35 4e 61 36 73 31 66 5f 56 75 75 62 51 79 4c 31 66 54 33 62 4e 46 52 63 39 75 52 62 53 42 52 67 32 78 75 58 44 45 37 31 70 42 6e 77 4e 44 75 7a 54 58 4f 30 6c 4f 39 47 68 67 6d 55 34 Data Ascii: aJzxjIPH14zk3kOQpLn8cR9PJf3WLBxTGzfpkG83u0b6pAhhTh5G3JOMJ60E6hsAGPuj7wZP5Ml6YOByGkXv9G9saDYbPZh0nF4bwUkkZ.YDg44WHp6ZgTgnMdApEwNZ5mhMQDNZHmZuwUKoGuNjg_jD5jx72ZLiQSkmGXZ4rnLwU_BlXpS3fCRt5.DPoCgPWc5Na6s1f_VuubQyL1fT3bNFRc9uRbSBRg2xuXDE71pBnwNDuzTXO0lO9GhgmU4
2024-12-17 10:51:52 UTC	479	IN	Data Raw: 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 62 61 73 65 36 34 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 72 36 57 65 59 6a 68 52 65 53 43 7a 47 53 43 7a 51 6c 78 6d 36 38 77 37 37 5a 35 6c 49 63 2e 52 38 38 6c 55 77 52 50 4a 4c 46 59 2d 31 37 33 34 34 33 32 37 31 32 2d 31 2e 30 2e 31 2e 31 2d 4f 63 44 46 56 Data Ascii: && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/base64.js?__cf_chl_rt_tk=r6WeYjhReSCzGSCzQlxm68w77Z5lIc.R88lUwRPJLFY-1734432712-1.0.1.1-OcDFV
2024-12-17 10:51:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49802	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	1328	OUT	GET /js/lazyload.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:54 UTC	906	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:54 GMT Content-Type: application/javascript Content-Length: 2625 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:20 GMT ETag: "a41-59c315790ef00" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5500 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kLz%2BGUn5Xh2VNnt793dVxSd2eOwvw1JKTi5w7zWqe7kfRzYfKxD%2B6n6pxiU7wJRNHIBNrKD5aJTc%2FwYryoU5l1ulnWpHmwLnkvrtX1GiKnS8XomEW9nYjzpwiQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c536e8f43fe-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1712&min_rtt=1708&rtt_var=650&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1906&delivery_rate=1671436&cwnd=236&unsent_bytes=0&cid=9534222af3c1d9b3&ts=448&x=0"
2024-12-17 10:51:54 UTC	463	IN	Data Raw: 2f 2a 0d 0a 20 2a 41 75 74 68 6f 72 3a 20 50 56 54 0d 0a 20 2a 0d 0a 20 2a 44 61 74 65 3a 20 30 33 2f 30 34 2f 32 30 31 35 0d 0a 20 2a 0d 0a 20 2a 50 6c 75 67 69 6e 3a 20 4c 61 7a 79 6c 6f 61 64 0d 0a 20 2a 0d 0a 20 2a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 3b 0d 0a 20 20 20 20 24 2e 66 6e 2e 6c 61 7a 79 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 20 20 20 20 20 20 20 20 20 20 20 3a 20 22 73 63 72 6f 6c 6c 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 20 20 20 20 20 20 20 20 20 20 3a 20 22 73 68 6f Data Ascii: /* Author: PVT Date: 03/04/2015 Plugin: Lazyload **/(function($) { var options; $.fn.lazyload = function(options) { var defaults = { event : "scroll", effect : "sho
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 65 6c 66 20 3d 20 74 68 69 73 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 20 3d 20 24 28 74 68 69 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 24 28 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 29 2e 62 69 6e 64 28 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 Data Ascii: elf = this; var obj = $(this); var scrollTop = $(options.container).scrollTop(); $(options.container).bind(options.event, function() { var scrollTop = $(options.container).scrollTop();
2024-12-17 10:51:54 UTC	793	IN	Data Raw: 20 20 20 20 69 74 65 6d 2e 62 69 6e 64 28 22 6c 6f 61 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 74 68 69 73 29 2e 66 61 64 65 4f 75 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 61 74 74 72 28 27 73 72 63 27 2c 20 69 74 65 6d 2e 61 74 74 72 28 6f 70 74 69 6f 6e 73 2e 64 61 74 61 5f 61 74 74 72 69 62 75 74 65 29 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 2e 66 61 64 65 49 6e 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 68 69 73 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: item.bind("load", function() { //$(this).fadeOut(); }).attr('src', item.attr(options.data_attribute)); item.fadeIn(); } }); //console.log(this);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49803	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	342	OUT	GET /js/load.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:54 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:54 UTC	895	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4f 33 61 4c 31 79 68 71 65 62 34 71 39 71 64 43 45 4a 61 56 53 38 4f 39 64 48 68 55 75 59 32 36 51 39 46 45 55 74 55 58 46 75 71 36 78 43 53 76 52 48 4b 33 35 6b 37 5a 36 36 75 63 6f 62 35 63 6c 43 75 37 2f 7a 67 46 36 67 73 66 4a 4b 66 36 78 68 69 72 4d 76 50 62 61 46 33 6f 56 4d 44 32 36 41 66 74 58 47 64 41 65 38 6b 3d 24 6a 51 57 41 6e 34 41 70 54 58 62 45 37 52 35 66 56 70 4a 45 48 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: O3aL1yhqeb4q9qdCEJaVS8O9dHhUuY26Q9FEUtUXFuq6xCSvRHK35k7Z66ucob5clCu7/zgF6gsfJKf6xhirMvPbaF3oVMD26AftXGdAe8k=$jQWAn4ApTXbE7R5fVpJEHA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 32 31 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 21fc<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 4a 6e 5f 4d 62 4b 53 71 76 58 78 47 5f 63 64 63 55 47 36 56 33 6d 58 6e 37 66 32 47 6c 55 39 35 37 33 42 43 33 65 5f 36 33 34 37 63 33 37 6e 53 53 63 64 49 46 6f 70 47 73 58 2e 6d 79 79 38 52 32 7a 38 35 42 50 55 32 37 73 4d 6f 33 77 70 57 34 4d 61 43 6b 70 39 61 6c 62 47 4b 31 59 74 58 45 48 6d 67 71 46 44 6e 56 7a 2e 7a 7a 41 69 57 51 79 77 33 46 44 6c 6e 57 39 4d 34 6b 2e 4f 68 6c 61 5f 47 31 52 73 72 74 33 59 66 39 57 53 4b 65 55 71 4c 75 47 4c 50 61 53 54 4d 57 6b 68 56 54 64 4e 47 39 74 4d 64 37 57 78 43 77 6e 49 52 38 46 51 65 6c 73 30 57 79 44 73 48 59 47 41 63 41 44 39 35 53 55 37 54 62 71 34 51 37 68 71 72 74 5f 76 4a 47 49 4e 70 6a 34 5a 30 7a 36 74 4c 58 75 31 72 31 4d 33 38 71 31 45 38 4f 5f 50 4c 66 2e 71 78 31 58 70 30 61 6a 55 47 75 46 4a Data Ascii: Jn_MbKSqvXxG_cdcUG6V3mXn7f2GlU9573BC3e_6347c37nSScdIFopGsX.myy8R2z85BPU27sMo3wpW4MaCkp9albGK1YtXEHmgqFDnVz.zzAiWQyw3FDlnW9M4k.Ohla_G1Rsrt3Yf9WSKeUqLuGLPaSTMWkhVTdNG9tMd7WxCwnIR8FQels0WyDsHYGAcAD95SU7Tbq4Q7hqrt_vJGINpj4Z0z6tLXu1r1M38q1E8O_PLf.qx1Xp0ajUGuFJ
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 44 44 4a 57 53 35 42 6d 6c 73 63 78 63 77 72 30 34 37 4b 6d 4e 6d 4d 78 53 41 35 62 68 45 75 49 71 2e 7a 44 32 61 32 55 41 51 39 59 2e 50 39 5f 47 46 6b 57 78 2e 70 44 53 6d 65 38 71 54 32 37 6d 73 68 4c 55 53 33 73 57 37 6c 78 61 4e 75 67 4b 35 6f 72 54 5f 4d 5a 4b 77 30 46 47 30 38 4e 39 58 69 62 48 44 65 50 4b 44 73 55 72 73 43 72 67 65 77 4d 56 6c 4b 6f 35 6c 78 45 37 67 6b 37 52 6f 56 64 5f 33 54 77 37 74 31 79 66 36 4f 76 78 69 42 52 71 55 46 63 4d 74 37 44 70 32 68 39 4a 66 38 42 39 62 68 56 68 55 64 6d 5a 68 35 6f 58 44 42 57 53 63 70 38 44 32 6f 64 6b 44 51 67 42 6f 6d 48 6e 5f 55 76 34 61 4e 42 48 6d 45 36 4e 6e 49 71 4a 53 53 59 54 69 7a 4c 68 56 73 67 55 64 41 5f 48 55 48 4f 47 31 45 35 33 69 33 50 6b 6d 68 35 44 37 58 71 76 58 34 4c 6e 5f 50 Data Ascii: DDJWS5Bmlscxcwr047KmNmMxSA5bhEuIq.zD2a2UAQ9Y.P9_GFkWx.pDSme8qT27mshLUS3sW7lxaNugK5orT_MZKw0FG08N9XibHDePKDsUrsCrgewMVlKo5lxE7gk7RoVd_3Tw7t1yf6OvxiBRqUFcMt7Dp2h9Jf8B9bhVhUdmZh5oXDBWScp8D2odkDQgBomHn_Uv4aNBHmE6NnIqJSSYTizLhVsgUdA_HUHOG1E53i3Pkmh5D7XqvX4Ln_P
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 32 52 36 44 4b 49 51 4f 44 4c 44 6c 52 43 52 43 71 4f 63 48 69 73 4c 6b 32 4b 48 79 66 66 53 4b 61 4a 58 36 57 41 61 74 35 55 48 7a 35 63 6c 53 53 53 76 31 55 4a 47 38 6b 58 69 48 52 67 69 66 74 67 35 53 79 52 72 54 4a 45 75 41 4d 52 4c 6f 2e 74 46 6a 58 53 5f 5a 42 59 72 2e 76 53 73 6f 32 46 44 45 46 34 4a 49 42 63 37 52 31 64 43 41 4a 61 6d 4c 67 4f 58 70 48 76 68 58 79 57 36 4c 52 4c 54 4c 66 57 52 4b 61 54 58 56 30 6e 41 4e 79 32 44 62 4c 68 5f 61 50 68 6c 59 45 38 69 37 46 69 45 71 4e 57 32 55 5a 42 33 50 77 64 61 2e 53 61 59 7a 65 49 44 2e 68 35 32 4e 74 68 31 51 5f 55 32 4b 57 35 49 55 77 6d 43 62 44 56 45 4b 54 36 39 6e 53 52 6a 4c 32 56 76 70 75 46 5a 33 76 30 6f 53 6d 64 59 65 73 41 52 59 6c 34 55 67 70 48 76 75 6f 4b 49 55 69 41 35 4c 4f 58 34 Data Ascii: 2R6DKIQODLDlRCRCqOcHisLk2KHyffSKaJX6WAat5UHz5clSSSv1UJG8kXiHRgiftg5SyRrTJEuAMRLo.tFjXS_ZBYr.vSso2FDEF4JIBc7R1dCAJamLgOXpHvhXyW6LRLTLfWRKaTXV0nANy2DbLh_aPhlYE8i7FiEqNW2UZB3Pwda.SaYzeID.h52Nth1Q_U2KW5IUwmCbDVEKT69nSRjL2VvpuFZ3v0oSmdYesARYl4UgpHvuoKIUiA5LOX4
2024-12-17 10:51:54 UTC	1369	IN	Data Raw: 32 69 4d 4e 4c 69 36 61 50 54 4c 32 59 36 36 2e 62 58 44 64 75 46 58 69 56 59 47 76 52 4f 77 70 61 34 54 6f 59 50 79 57 6f 6d 55 57 55 77 54 51 43 59 71 59 45 4d 39 33 55 6b 66 32 74 4c 66 47 37 6b 79 4a 36 75 78 45 66 57 4c 53 35 65 6a 6e 67 31 36 53 31 79 33 68 75 44 66 59 36 46 4a 43 56 58 53 47 7a 72 63 73 32 5f 45 36 6b 70 47 6b 58 70 4a 54 7a 67 6d 39 54 53 51 57 45 43 4d 58 31 55 4e 47 37 7a 78 4a 4e 50 45 4f 63 38 30 6c 74 5a 62 53 70 56 32 77 4a 42 45 6b 57 49 51 64 79 6e 49 35 5a 37 58 36 47 41 53 61 31 32 77 64 56 71 37 77 6a 46 61 77 4b 51 76 6d 76 64 41 52 4a 6e 4b 77 79 50 61 66 46 67 72 59 76 32 76 74 63 52 4f 78 65 78 33 55 55 6b 62 72 77 30 64 34 74 2e 6b 33 61 49 38 6e 71 58 34 45 73 41 7a 69 46 42 2e 77 79 58 70 67 64 33 6d 6a 64 54 57 Data Ascii: 2iMNLi6aPTL2Y66.bXDduFXiVYGvROwpa4ToYPyWomUWUwTQCYqYEM93Ukf2tLfG7kyJ6uxEfWLS5ejng16S1y3huDfY6FJCVXSGzrcs2_E6kpGkXpJTzgm9TSQWECMX1UNG7zxJNPEOc80ltZbSpV2wJBEkWIQdynI5Z7X6GASa12wdVq7wjFawKQvmvdARJnKwyPafFgrYv2vtcROxex3UUkbrw0d4t.k3aI8nqX4EsAziFB.wyXpgd3mjdTW
2024-12-17 10:51:54 UTC	494	IN	Data Raw: 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 6c 6f 61 64 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 58 39 4e 78 57 4e 43 5f 33 79 6e 46 77 74 70 43 55 67 31 4a 41 4f 61 61 58 56 77 62 4d 66 35 4d 74 6c 45 6f 4b 52 61 52 6b 59 77 2d 31 37 33 34 34 33 32 37 31 Data Ascii: (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/load.js?__cf_chl_rt_tk=X9NxWNC_3ynFwtpCUg1JAOaaXVwbMf5MtlEoKRaRkYw-173443271
2024-12-17 10:51:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49804	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	1330	OUT	GET /js/slider_v04.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:55 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: application/javascript Content-Length: 7560 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:21 GMT ETag: "1d88-59c3157a03140" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5501 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwMex3avz2PDSmGWpGFGs5Vc1PWgw7jdJNQrgyZQdFf37ErguXmciPUtx0c2KRxoqLueKN1QCGPKoXH953n1SxuVI17GqxOYGJLQyAtHVOMzrb2XLbLyZ8WDYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c550a5143ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1634&min_rtt=1628&rtt_var=623&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1908&delivery_rate=1738095&cwnd=223&unsent_bytes=0&cid=e96709feddb4e0ba&ts=454&x=0"
2024-12-17 10:51:55 UTC	468	IN	Data Raw: 2f 2a 0d 0a 20 2a 41 75 74 68 6f 72 3a 20 50 56 54 0d 0a 20 2a 0d 0a 20 2a 44 61 74 65 3a 20 30 33 2f 30 34 2f 32 30 31 35 0d 0a 20 2a 0d 0a 20 2a 50 6c 75 67 69 6e 3a 20 53 6c 69 64 65 72 0d 0a 20 2a 0d 0a 20 2a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 3b 0d 0a 20 20 20 20 24 2e 66 6e 2e 73 6c 69 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 5f 61 74 74 72 69 62 75 74 65 20 20 3a 20 22 64 61 74 61 2d 6f 72 69 67 69 6e 61 6c 22 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 20 3d 20 Data Ascii: /* Author: PVT Date: 03/04/2015 Plugin: Slider **/(function($) { var options; $.fn.slider = function(options) { var defaults = { data_attribute : "data-original" }; options =
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 66 6c 6f 77 27 20 3a 20 27 68 69 64 64 65 6e 27 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 64 74 68 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 6f 75 74 65 72 57 69 64 74 68 28 74 72 75 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 65 69 67 68 74 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 74 61 6c 5f 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 Data Ascii: flow' : 'hidden'}); var scrollTop = $(options.container).scrollTop(); var width = obj.find('li').outerWidth(true); var height = obj.find('li').outerHeight(true); var total_length = obj.find('li').length;
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 61 74 69 6f 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 28 69 6d 67 5f 77 20 2f 20 77 69 64 74 68 29 20 2a 20 31 30 30 29 20 2f 20 31 30 30 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 6f 74 61 6c 5f 77 20 3d 20 28 69 6d 67 5f 77 20 2b 20 6d 61 72 67 69 6e 29 20 2a 20 28 74 6f 74 61 6c 5f 6c 65 6e 67 74 68 20 2b 20 31 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 77 69 64 74 68 28 69 6d 67 5f 77 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 68 65 69 67 68 74 28 27 31 30 30 25 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6d 67 5f 68 20 3d 20 28 68 65 69 67 Data Ascii: ; var ratio = Math.ceil((img_w / width) * 100) / 100; var total_w = (img_w + margin) * (total_length + 1); obj.find('li').width(img_w); obj.find('li').height('100%'); var img_h = (heig
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6f 62 6a 2e 66 69 6e 64 28 27 6c 69 27 29 2e 68 61 73 43 6c 61 73 73 28 27 73 6c 69 64 65 5f 62 69 67 5f 69 6d 67 27 29 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 63 75 73 5f 68 20 3d 20 66 6f 63 75 73 5f 68 20 2b 20 37 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 63 75 73 5f 68 20 3d 20 66 6f 63 75 73 5f 68 20 2b 20 35 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 76 65 6e 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 77 69 64 74 68 Data Ascii: if(obj.find('li').hasClass('slide_big_img')){ focus_h = focus_h + 7; } else{ focus_h = focus_h + 5; } $(event.currentTarget).width
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 65 76 65 6e 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 66 69 6e 64 28 27 2e 74 69 74 6c 65 27 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 20 3a 20 27 68 69 64 64 65 6e 27 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 76 65 6e 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 61 64 64 43 6c 61 73 73 28 27 66 6f 63 75 73 65 64 27 29 3b 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 76 65 6e 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 62 69 6e 64 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 54 72 61 6e 73 69 74 Data Ascii: //$(event.currentTarget).find('.title').css({'visibility' : 'hidden'}); $(event.currentTarget).addClass('focused'); $(event.currentTarget).bind("transitionend webkitTransitionEnd oTransit
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 78 74 53 6c 69 64 65 5f 77 20 3d 20 70 61 67 65 20 2a 20 28 6f 70 74 69 6f 6e 73 2e 6d 69 6e 53 6c 69 64 65 73 20 2a 20 77 69 64 74 68 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 61 74 74 72 28 27 70 61 67 65 27 2c 20 70 61 67 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 6a 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: .hide(); } else{ var nextSlide_w = page * (options.minSlides * width); } obj.attr('page', page); obj.animate({ "margin-le
2024-12-17 10:51:55 UTC	247	IN	Data Raw: 69 6f 6e 20 63 68 65 63 6b 52 65 71 75 69 72 65 64 56 61 6c 75 65 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 65 20 6f 66 20 74 68 65 73 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6e 6f 6e 20 66 61 6c 73 79 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 69 66 20 28 6f 70 74 69 6f 6e 73 2e 77 69 64 74 68 20 3d 3d 20 27 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 65 65 64 20 74 6f 20 73 65 74 20 65 69 74 68 65 72 20 52 65 73 75 6c 74 5f 69 64 3a 20 6f 72 20 52 6f 6c 65 3a 20 6f 70 74 69 6f 6e 2e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 7d 29 28 6a 51 75 65 72 79 29 3b 20 Data Ascii: ion checkRequiredValue(options) { // one of these needs to be non falsy //if (options.width == '') //throw new Error("Need to set either Result_id: or Role: option."); } };})(jQuery);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49805	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	346	OUT	GET /js/tooltips.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:55 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:55 UTC	902	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4f 76 43 4c 5a 76 32 7a 65 62 61 59 6e 63 6a 42 67 55 30 33 41 77 55 72 65 7a 49 76 31 36 72 72 71 46 2f 4e 45 53 38 48 59 31 46 4c 76 54 48 72 52 4d 55 55 7a 52 35 35 39 38 37 76 30 48 33 74 72 57 56 39 33 67 36 2b 58 34 66 65 36 6a 46 2b 57 61 67 73 2b 64 36 58 62 79 55 52 66 2f 51 33 30 44 69 58 57 38 58 66 58 59 73 3d 24 59 38 31 68 39 4c 5a 32 4f 7a 70 62 6d 56 31 47 48 6b 45 4f 44 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: OvCLZv2zebaYncjBgU03AwUrezIv16rrqF/NES8HY1FLvTHrRMUUzR55987v0H3trWV93g6+X4fe6jF+Wags+d6XbyURf/Q30DiXW8XfXYs=$Y81h9LZ2OzpbmV1GHkEODQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 32 32 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2208<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 44 53 64 46 5f 44 68 42 39 39 59 32 4f 66 4e 43 65 6a 4b 44 66 6f 36 31 6b 48 48 49 74 30 54 6a 2e 76 54 68 2e 74 46 53 54 42 35 6e 6c 79 6d 69 38 5a 71 64 55 72 68 42 32 61 50 71 68 63 4e 63 33 31 44 51 51 67 51 6a 34 50 38 74 63 4e 4c 39 7a 70 48 66 38 6f 6c 42 49 78 41 4f 71 69 49 66 75 4b 6b 72 49 66 57 68 46 39 69 47 6a 44 34 2e 67 72 57 37 64 6e 41 6a 2e 4a 37 6c 54 4e 59 58 6d 72 49 34 4d 6c 70 6b 41 31 6c 35 78 53 33 4c 68 45 52 6c 53 31 57 59 6e 46 4e 48 6e 57 6d 6a 65 31 58 4a 58 53 33 6b 57 6c 4b 33 56 67 32 2e 46 65 32 71 51 43 4d 6f 73 70 70 30 63 52 4a 63 55 52 35 6c 36 61 66 6f 2e 67 58 59 32 30 35 6c 72 75 4e 52 7a 70 57 64 31 69 31 43 48 4e 43 46 4c 53 64 77 36 2e 64 6d 6f 51 72 43 32 37 7a 4b 39 64 4b 71 32 68 33 4d 32 33 44 39 51 66 2e Data Ascii: DSdF_DhB99Y2OfNCejKDfo61kHHIt0Tj.vTh.tFSTB5nlymi8ZqdUrhB2aPqhcNc31DQQgQj4P8tcNL9zpHf8olBIxAOqiIfuKkrIfWhF9iGjD4.grW7dnAj.J7lTNYXmrI4MlpkA1l5xS3LhERlS1WYnFNHnWmje1XJXS3kWlK3Vg2.Fe2qQCMospp0cRJcUR5l6afo.gXY205lruNRzpWd1i1CHNCFLSdw6.dmoQrC27zK9dKq2h3M23D9Qf.
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 52 61 6a 69 73 6f 64 54 4c 36 57 43 7a 31 4f 31 62 69 6f 72 42 45 34 41 53 73 49 6d 48 4c 6d 37 6d 65 44 61 31 4e 62 66 4d 35 4b 68 56 68 74 76 67 6d 66 37 63 4d 72 49 65 55 6b 69 55 32 4e 32 73 74 71 61 7a 4e 50 63 4b 47 64 63 62 58 4f 30 49 42 70 6e 38 31 62 74 6a 48 71 5a 43 56 65 73 57 78 50 56 44 7a 4c 4b 6f 49 2e 46 4f 69 41 46 65 59 55 61 41 37 46 42 4f 4e 5f 61 76 35 63 6a 57 4c 32 50 73 48 71 66 6c 4f 67 6c 30 47 69 44 43 54 5a 65 69 79 57 49 47 72 50 7a 50 42 5a 78 72 63 78 5f 77 6b 42 37 38 65 78 4f 34 71 70 63 5f 70 5f 32 75 79 37 37 6d 4f 6d 6c 78 43 6a 71 55 43 2e 6e 6a 31 62 6b 38 6e 4a 55 37 4b 43 51 76 62 6a 62 48 72 66 79 72 47 73 4a 4b 2e 69 56 77 62 75 77 38 49 48 67 42 5a 56 68 73 56 6e 4f 69 4c 63 6f 31 4a 38 55 68 38 41 32 46 77 54 Data Ascii: RajisodTL6WCz1O1biorBE4ASsImHLm7meDa1NbfM5KhVhtvgmf7cMrIeUkiU2N2stqazNPcKGdcbXO0IBpn81btjHqZCVesWxPVDzLKoI.FOiAFeYUaA7FBON_av5cjWL2PsHqflOgl0GiDCTZeiyWIGrPzPBZxrcx_wkB78exO4qpc_p_2uy77mOmlxCjqUC.nj1bk8nJU7KCQvbjbHrfyrGsJK.iVwbuw8IHgBZVhsVnOiLco1J8Uh8A2FwT
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 30 76 58 52 32 78 4a 37 57 4e 39 6e 50 36 56 36 56 2e 79 6b 4b 55 44 4b 44 79 4b 67 6c 64 44 77 73 57 58 52 34 66 30 6c 68 5a 76 34 58 55 57 38 37 57 48 6d 56 6b 48 51 77 30 35 69 4c 71 74 59 78 56 59 4b 41 4f 6b 62 6e 76 36 76 65 35 41 4b 67 4c 45 69 36 76 69 72 77 53 2e 32 73 55 55 30 50 63 4e 4e 44 55 76 6e 4f 72 72 72 5a 34 51 6b 4c 34 35 49 59 6e 57 6d 4a 7a 64 77 56 68 47 42 4b 36 37 6d 52 5f 50 32 78 4e 43 5a 64 53 43 69 72 73 46 4b 36 6c 57 65 74 7a 77 71 6a 35 79 52 5f 6f 70 34 61 32 72 37 64 68 43 52 58 54 37 34 67 33 75 58 69 34 45 56 79 54 42 52 44 73 48 6a 5a 67 6d 63 78 4c 54 5f 57 51 76 6a 4e 43 4d 6b 4e 71 32 31 72 67 55 78 4f 39 63 59 4a 63 7a 56 4c 37 6a 31 50 52 6e 71 78 4c 51 66 31 54 47 58 5a 49 5f 6e 69 6c 76 7a 46 67 66 56 69 4f 55 Data Ascii: 0vXR2xJ7WN9nP6V6V.ykKUDKDyKgldDwsWXR4f0lhZv4XUW87WHmVkHQw05iLqtYxVYKAOkbnv6ve5AKgLEi6virwS.2sUU0PcNNDUvnOrrrZ4QkL45IYnWmJzdwVhGBK67mR_P2xNCZdSCirsFK6lWetzwqj5yR_op4a2r7dhCRXT74g3uXi4EVyTBRDsHjZgmcxLT_WQvjNCMkNq21rgUxO9cYJczVL7j1PRnqxLQf1TGXZI_nilvzFgfViOU
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 66 5a 61 5f 72 39 79 65 57 75 41 36 38 6c 67 75 56 6e 6b 71 2e 52 72 50 4d 68 35 71 59 4c 4c 6c 36 7a 63 55 42 56 2e 76 4b 4b 34 2e 53 53 75 34 48 58 57 47 42 48 51 46 75 37 4c 32 31 76 34 6a 57 54 5f 66 4d 7a 33 34 50 33 59 4a 5f 39 37 69 76 62 41 4d 69 2e 32 53 43 31 48 66 36 77 38 62 49 6d 52 50 55 73 7a 6a 73 67 69 64 33 6a 74 69 64 69 6d 57 73 39 44 4c 57 58 48 4a 6d 36 4b 76 6e 49 57 35 66 33 68 37 5f 52 64 54 67 4c 6c 49 65 5f 74 6e 64 5f 5f 35 6a 46 38 6c 57 32 37 4f 62 57 4e 31 49 58 30 57 76 71 45 75 58 36 32 35 73 42 7a 43 4d 4b 78 43 59 6f 5f 78 35 72 34 46 48 37 43 49 62 33 52 5f 64 4d 5f 6e 5f 6d 31 79 49 6a 46 56 36 64 36 38 34 6c 63 4d 77 38 4a 2e 69 55 7a 4e 44 41 61 52 56 4c 36 35 56 79 46 2e 78 55 73 36 53 50 36 79 7a 61 45 42 74 6d 75 Data Ascii: fZa_r9yeWuA68lguVnkq.RrPMh5qYLLl6zcUBV.vKK4.SSu4HXWGBHQFu7L21v4jWT_fMz34P3YJ_97ivbAMi.2SC1Hf6w8bImRPUszjsgid3jtidimWs9DLWXHJm6KvnIW5f3h7_RdTgLlIe_tnd__5jF8lW27ObWN1IX0WvqEuX625sBzCMKxCYo_x5r4FH7CIb3R_dM_n_m1yIjFV6d684lcMw8J.iUzNDAaRVL65VyF.xUs6SP6yzaEBtmu
2024-12-17 10:51:55 UTC	506	IN	Data Raw: 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 74 6f 6f 6c 74 69 70 73 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 58 6e 73 33 71 78 68 71 38 75 34 46 4a 48 6d 34 54 51 57 62 34 47 62 48 75 79 4d 75 64 32 4a 4b 74 58 31 67 6d 73 37 32 50 Data Ascii: earch;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/tooltips.js?__cf_chl_rt_tk=Xns3qxhq8u4FJHm4TQWb4GbHuyMud2JKtX1gms72P
2024-12-17 10:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49806	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	1336	OUT	GET /js/movies.min.js?v=1.6 HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:55 UTC	911	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: application/javascript Content-Length: 6002 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:19 GMT ETag: "1772-59c315781acc0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5501 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=js%2BzqmTriivXxNb2ii2ytZ7upE3Py%2B2gilMk4l6jdKEjRu6Yo8C%2Fnvk4LhqhdSTRicNhmWzNYr8ewrYE2%2FFRW%2FZ00cohzNnuiPVNLd9akCdCmazsPgoIvoW5qA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c567dbcc46b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1471&min_rtt=1459&rtt_var=572&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1914&delivery_rate=1872995&cwnd=223&unsent_bytes=0&cid=ac8f65600d9ebef4&ts=449&x=0"
2024-12-17 10:51:55 UTC	458	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4e 6f 74 69 66 79 28 29 7b 30 3d 3d 24 28 22 23 6c 69 73 74 2d 6e 6f 74 69 66 79 20 2e 6e 6f 74 69 66 79 2d 69 74 65 6d 22 29 2e 6c 65 6e 67 74 68 26 26 24 2e 61 6a 61 78 28 7b 75 72 6c 3a 62 61 73 65 5f 75 72 6c 2b 22 61 6a 61 78 2f 75 73 65 72 5f 6c 6f 61 64 5f 6e 6f 74 69 66 79 22 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 31 3d 3d 65 2e 73 74 61 74 75 73 26 26 28 24 28 22 23 6e 6f 74 69 66 79 2d 6c 6f 61 64 69 6e 67 22 29 2e 72 65 6d 6f 76 65 28 29 2c 24 28 22 23 6c 69 73 74 2d 6e 6f 74 69 66 79 22 29 2e 68 74 6d 6c 28 65 2e 68 74 6d 6c 29 2c 65 2e 6e 6f 74 69 66 79 5f 75 6e 72 65 61 64 3e 30 3f 24 28 22 2e 66 65 Data Ascii: function loadNotify(){0==$("#list-notify .notify-item").length&&$.ajax({url:base_url+"ajax/user_load_notify",type:"GET",dataType:"json",success:function(e){1==e.status&&($("#notify-loading").remove(),$("#list-notify").html(e.html),e.notify_unread>0?$(".fe
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 73 6f 6e 22 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 22 74 6f 70 76 69 65 77 2d 74 6f 64 61 79 22 3a 24 28 22 23 74 6f 70 76 69 65 77 2d 74 6f 64 61 79 20 23 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 29 2e 68 74 6d 6c 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 70 2d 66 61 76 6f 72 69 74 65 22 3a 24 28 22 23 74 6f 70 2d 66 61 76 6f 72 69 74 65 20 23 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 29 2e 68 74 6d 6c 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 70 2d 72 61 74 69 6e 67 22 3a 24 28 22 23 74 6f 70 2d 72 61 74 69 6e 67 20 23 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 29 2e 68 74 6d 6c 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 62 72 65 61 Data Ascii: son",success:function(e){switch(e.type){case"topview-today":$("#topview-today #content-box").html(e.content);break;case"top-favorite":$("#top-favorite #content-box").html(e.content);break;case"top-rating":$("#top-rating #content-box").html(e.content);brea
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 69 6f 6e 20 73 75 62 73 63 72 69 62 65 5f 68 6f 6d 65 28 29 7b 69 66 28 21 24 2e 63 6f 6f 6b 69 65 28 22 73 75 62 73 63 72 69 62 65 64 22 29 29 7b 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 73 75 63 63 65 73 73 2d 73 75 62 73 22 29 2e 68 69 64 65 28 29 3b 76 61 72 20 65 3d 24 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 65 6d 61 69 6c 2d 68 6f 6d 65 5d 22 29 2e 76 61 6c 28 29 3b 22 22 3d 3d 65 2e 74 72 69 6d 28 29 3f 28 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 22 29 2e 74 65 78 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 2e 22 29 2c 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 22 29 2e 73 68 6f 77 28 29 29 3a 76 61 6c 69 64 61 74 65 45 Data Ascii: ion subscribe_home(){if(!$.cookie("subscribed")){$("#error-email-subs").hide(),$("#success-subs").hide();var e=$("input[name=email-home]").val();""==e.trim()?($("#error-email-subs").text("Please enter your email."),$("#error-email-subs").show()):validateE
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 29 2c 24 2e 63 6f 6f 6b 69 65 28 22 73 75 62 73 63 72 69 62 65 64 22 2c 31 2c 7b 65 78 70 69 72 65 73 3a 33 36 35 7d 29 2c 24 2e 63 6f 6f 6b 69 65 28 22 73 75 62 73 63 72 69 62 65 22 2c 31 2c 7b 65 78 70 69 72 65 73 3a 33 36 35 7d 29 29 3a 28 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 2d 66 6f 6f 74 65 72 22 29 2e 74 65 78 74 28 22 53 75 62 73 63 72 69 62 65 20 66 61 69 6c 65 64 2e 22 29 2c 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 2d 66 6f 6f 74 65 72 22 29 2e 73 68 6f 77 28 29 29 2c 24 28 22 23 73 75 62 73 63 72 69 62 65 2d 73 75 62 6d 69 74 2d 66 6f 6f 74 65 72 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 29 7d 7d 29 29 3a 28 24 28 22 23 65 72 72 6f 72 2d 65 6d 61 69 6c 2d 73 75 62 73 2d 66 Data Ascii: ),$.cookie("subscribed",1,{expires:365}),$.cookie("subscribe",1,{expires:365})):($("#error-email-subs-footer").text("Subscribe failed."),$("#error-email-subs-footer").show()),$("#subscribe-submit-footer").removeAttr("disabled")}})):($("#error-email-subs-f
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 7b 24 28 22 23 63 6f 6d 6d 65 6e 74 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 7d 29 2c 24 28 22 2e 74 6f 70 2d 6d 65 6e 75 3e 20 6c 69 22 29 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 65 29 2c 24 28 22 2e 74 6f 70 2d 6d 65 6e 75 3e 20 6c 69 22 29 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6f 75 74 22 2c 73 29 3b 76 61 72 20 6f 3d 30 3b 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3c 6f 3f 22 66 69 78 65 64 22 21 3d 24 28 22 68 65 61 64 65 72 22 29 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 26 26 28 24 28 22 68 65 61 64 65 72 22 29 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 Data Ascii: {$("#comment").toggleClass("active")}),$(".top-menu> li").bind("mouseover",e),$(".top-menu> li").bind("mouseout",s);var o=0;$(window).on("scroll",function(){$(window).scrollTop()<o?"fixed"!=$("header").css("position")&&($("header").css({position:"fixed",t
2024-12-17 10:51:55 UTC	68	IN	Data Raw: 69 72 65 73 3a 31 7d 29 7d 2c 31 65 34 29 2c 24 2e 63 6f 6f 6b 69 65 28 22 73 75 62 73 63 72 69 62 65 64 22 29 7c 7c 24 28 22 23 73 75 62 73 2d 62 6c 6f 63 6b 2d 68 6f 6d 65 22 29 2e 73 68 6f 77 28 29 3b Data Ascii: ires:1})},1e4),$.cookie("subscribed")\|\|$("#subs-block-home").show();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49807	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:54 UTC	345	OUT	GET /js/wow.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:55 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:55 UTC	897	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 6a 5a 65 71 5a 7a 66 42 72 70 75 54 34 4e 66 5a 78 34 74 45 61 4d 6e 38 4c 33 71 45 34 71 72 4d 67 4d 6d 4e 69 45 38 74 4b 4b 52 79 46 61 4d 2b 2f 49 74 76 68 66 78 4e 52 63 65 4f 4f 70 63 47 52 4d 70 53 57 50 4d 2b 6e 44 33 6b 65 63 50 58 58 41 38 57 56 30 43 5a 37 69 58 6f 74 51 78 59 6d 38 2b 66 55 43 2b 44 75 77 34 3d 24 62 70 31 41 47 2b 67 70 35 53 33 42 4e 2f 49 55 58 42 61 72 41 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: jZeqZzfBrpuT4NfZx4tEaMn8L3qE4qrMgMmNiE8tKKRyFaM+/ItvhfxNRceOOpcGRMpSWPM+nD3kecPXXA8WV0CZ7iXotQxYm8+fUC+Duw4=$bp1AG+gp5S3BN/IUXBarAA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 32 32 30 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2205<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 32 2e 67 43 57 37 66 61 59 62 34 51 4d 6d 61 7a 37 7a 6a 46 57 4f 5a 77 45 64 65 36 42 37 56 5a 47 6b 65 72 76 49 4c 43 6a 6c 6b 6e 6d 74 45 33 59 54 32 50 36 68 32 2e 67 43 4d 31 30 71 7a 74 50 4f 69 30 58 6c 41 57 4e 62 55 5a 75 4e 32 6f 54 50 75 33 4d 67 36 31 2e 61 48 38 5f 4f 74 53 73 67 4f 68 79 78 42 64 56 51 74 62 41 70 46 74 31 39 6d 45 49 73 4c 48 4a 63 4f 66 56 62 4d 67 62 56 4f 76 6e 57 6e 34 64 6f 6d 6b 76 54 57 65 33 4a 41 59 47 47 73 48 75 53 72 7a 62 4a 4c 71 42 65 35 69 76 7a 47 6a 74 4f 54 5f 72 46 5f 39 6d 6e 76 4d 4a 56 6a 4e 43 71 4b 45 6b 51 6a 6a 5f 4c 70 39 37 66 37 4e 77 71 41 6a 31 65 36 75 33 5a 55 42 30 63 61 37 38 47 77 63 61 49 66 6c 35 38 76 68 44 38 55 59 77 32 6c 77 30 66 76 58 64 75 73 6e 35 57 5a 4b 5f 6e 38 6d 54 35 62 Data Ascii: 2.gCW7faYb4QMmaz7zjFWOZwEde6B7VZGkervILCjlknmtE3YT2P6h2.gCM10qztPOi0XlAWNbUZuN2oTPu3Mg61.aH8_OtSsgOhyxBdVQtbApFt19mEIsLHJcOfVbMgbVOvnWn4domkvTWe3JAYGGsHuSrzbJLqBe5ivzGjtOT_rF_9mnvMJVjNCqKEkQjj_Lp97f7NwqAj1e6u3ZUB0ca78GwcaIfl58vhD8UYw2lw0fvXdusn5WZK_n8mT5b
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 2e 59 58 44 58 4c 65 74 72 6e 65 74 63 37 38 54 62 33 35 71 61 77 54 32 37 4b 67 44 71 69 39 75 54 66 5a 34 73 48 6a 78 2e 37 48 42 58 66 50 53 30 6a 48 39 65 77 50 77 35 4f 75 31 48 56 4a 31 65 36 59 70 44 5a 58 36 30 66 49 49 30 64 54 65 39 77 59 76 46 51 58 34 53 7a 6f 79 46 6d 46 41 6a 71 76 51 6d 43 36 32 71 6e 73 4c 77 46 6a 75 44 75 48 75 46 74 59 74 44 48 51 71 41 43 66 30 58 5a 6a 70 34 30 65 31 55 77 61 37 4c 71 2e 52 4b 69 52 58 67 33 4d 46 72 45 31 38 36 57 41 6f 34 2e 68 5a 49 54 38 47 32 57 51 68 34 42 6c 4b 31 52 4c 51 42 2e 37 48 44 61 5f 71 61 55 36 4e 33 67 36 54 76 6a 36 31 79 45 50 43 51 49 75 56 65 4e 46 52 6b 56 43 74 47 6d 54 48 51 50 79 44 71 37 6e 55 32 47 46 57 52 5f 4b 4d 6e 57 57 6e 4b 68 66 42 49 6b 32 72 50 71 42 36 6e 57 74 Data Ascii: .YXDXLetrnetc78Tb35qawT27KgDqi9uTfZ4sHjx.7HBXfPS0jH9ewPw5Ou1HVJ1e6YpDZX60fII0dTe9wYvFQX4SzoyFmFAjqvQmC62qnsLwFjuDuHuFtYtDHQqACf0XZjp40e1Uwa7Lq.RKiRXg3MFrE186WAo4.hZIT8G2WQh4BlK1RLQB.7HDa_qaU6N3g6Tvj61yEPCQIuVeNFRkVCtGmTHQPyDq7nU2GFWR_KMnWWnKhfBIk2rPqB6nWt
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 47 6d 61 65 34 46 6a 65 74 59 50 53 46 58 45 51 78 34 36 35 50 4e 6b 54 6b 58 56 53 41 51 6c 65 6e 6b 62 6d 72 31 70 63 7a 6f 49 42 5f 76 6b 52 5a 31 37 61 64 48 64 48 35 39 78 4f 31 36 46 65 35 69 5f 2e 38 6e 6e 33 69 37 4b 6a 79 6e 6f 4b 71 4d 6a 36 52 36 36 2e 61 36 47 4e 4a 76 6a 79 6e 42 79 79 69 43 68 61 65 6e 5a 75 33 44 42 54 47 6d 30 6e 32 71 64 44 6b 46 78 4a 31 6f 72 47 4c 39 67 4f 7a 4f 5a 6c 69 64 2e 37 68 65 55 4a 74 39 34 5a 4d 63 35 45 39 45 46 70 43 56 76 48 56 67 6b 4d 2e 44 39 6a 6a 48 78 4b 6b 31 54 69 6e 39 67 69 4c 49 72 4b 47 51 79 76 47 6c 6c 61 6a 2e 78 6e 77 50 39 4c 64 56 69 38 44 6a 55 6a 52 75 54 48 32 33 51 76 57 7a 6a 32 4d 44 46 6a 42 31 41 4a 4e 51 72 63 75 4b 44 4f 73 6d 52 54 56 41 43 72 6b 67 52 45 69 57 66 4d 66 74 64 Data Ascii: Gmae4FjetYPSFXEQx465PNkTkXVSAQlenkbmr1pczoIB_vkRZ17adHdH59xO16Fe5i_.8nn3i7KjynoKqMj6R66.a6GNJvjynByyiChaenZu3DBTGm0n2qdDkFxJ1orGL9gOzOZlid.7heUJt94ZMc5E9EFpCVvHVgkM.D9jjHxKk1Tin9giLIrKGQyvGllaj.xnwP9LdVi8DjUjRuTH23QvWzj2MDFjB1AJNQrcuKDOsmRTVACrkgREiWfMftd
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 4e 65 6b 6f 73 52 43 4a 42 55 6d 48 4d 59 34 50 46 41 58 64 7a 68 69 45 61 6f 46 58 63 34 43 38 66 42 54 72 34 4a 6e 37 77 6e 73 32 47 32 63 66 37 2e 30 61 5f 5f 71 4f 6c 59 34 47 35 70 61 69 74 73 31 61 4b 70 6e 45 73 44 61 43 52 5a 39 6c 76 63 32 77 78 5f 39 53 73 53 4a 47 44 36 59 50 6e 75 42 67 78 44 64 33 36 34 41 71 6b 41 75 6d 4b 56 4a 69 42 70 65 44 44 35 39 37 35 4a 50 62 75 7a 75 67 63 5f 58 6c 2e 4c 76 53 66 61 46 6b 56 4b 64 43 58 72 50 4b 4d 78 37 4f 47 54 64 7a 5f 58 67 78 6c 78 61 66 61 51 69 77 4c 78 61 36 39 39 4a 71 31 34 55 70 64 6d 78 31 4c 63 30 59 5a 58 62 64 65 46 6e 6e 65 61 37 47 68 79 59 59 38 4e 53 6f 4f 55 71 38 54 55 45 52 66 72 6e 54 77 62 76 4f 5a 2e 36 4e 51 51 45 36 74 50 2e 73 49 57 69 6f 71 34 79 64 44 39 64 5a 4a 49 68 Data Ascii: NekosRCJBUmHMY4PFAXdzhiEaoFXc4C8fBTr4Jn7wns2G2cf7.0a__qOlY4G5paits1aKpnEsDaCRZ9lvc2wx_9SsSJGD6YPnuBgxDd364AqkAumKVJiBpeDD5975JPbuzugc_Xl.LvSfaFkVKdCXrPKMx7OGTdz_XgxlxafaQiwLxa699Jq14Updmx1Lc0YZXbdeFnnea7GhyYY8NSoOUq8TUERfrnTwbvOZ.6NQQE6tP.sIWioq4ydD9dZJIh
2024-12-17 10:51:55 UTC	503	IN	Data Raw: 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 77 6f 77 2e 6d 69 6e 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 2e 4f 37 37 50 55 75 70 53 63 5a 4c 51 37 57 32 38 41 66 6b 41 5a 59 49 44 69 74 76 58 6b 69 51 65 71 73 62 4d 5a 31 65 7a 47 38 2d Data Ascii: rch;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/wow.min.js?__cf_chl_rt_tk=.O77PUupScZLQ7W28AfkAZYIDitvXkiQeqsbMZ1ezG8-
2024-12-17 10:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49808	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:55 UTC	1327	OUT	GET /js/app_v31.js HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:55 UTC	908	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: application/javascript Content-Length: 17087 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:17 GMT ETag: "42bf-59c3157632840" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5501 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=00fP0JI5XkDbTEP2ZGGTuFmYcwdwdA%2FPch3i5Lgro4514fq0NRRxzf97nfD92iwVbQG72sRHTUpxDnlJzoqIq46uUeeNKNotb%2BKHHfs%2Bn1k1qiyysT12AX47EQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c568c504289-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1597&min_rtt=1593&rtt_var=607&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1905&delivery_rate=1790312&cwnd=150&unsent_bytes=0&cid=e1b8b421cb8e2e6e&ts=451&x=0"
2024-12-17 10:51:55 UTC	461	IN	Data Raw: 0a 76 61 72 20 77 6f 77 20 3d 20 6e 65 77 20 57 4f 57 28 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 43 6c 61 73 73 3a 20 27 77 6f 77 27 2c 20 2f 2f 20 61 6e 69 6d 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 63 73 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 77 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 65 43 6c 61 73 73 3a 20 27 61 6e 69 6d 61 74 65 64 27 2c 20 2f 2f 20 61 6e 69 6d 61 74 69 6f 6e 20 63 73 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 61 6e 69 6d 61 74 65 64 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 3a 20 30 2c 20 2f 2f 20 64 69 73 74 61 6e 63 65 20 74 6f 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 74 72 69 67 67 65 72 69 6e 67 20 Data Ascii: var wow = new WOW( { boxClass: 'wow', // animated element css class (default is wow) animateClass: 'animated', // animation css class (default is animated) offset: 0, // distance to the element when triggering
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 20 20 7d 0a 29 3b 0a 77 6f 77 2e 69 6e 69 74 28 29 3b 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 20 20 20 20 69 66 28 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 0a 20 20 20 20 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 0a 20 20 20 20 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 0a 20 20 20 20 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 0a 20 20 20 20 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 Data Ascii: });wow.init();$(document).ready(function () { if( navigator.userAgent.match(/Android/i) \|\| navigator.userAgent.match(/webOS/i) \|\| navigator.userAgent.match(/iPhone/i) \|\| navigator.userAgent.match(/iPad/i) \|\| navigator.userA
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 29 2e 70 72 65 76 28 29 2e 68 74 6d 6c 28 70 61 72 61 6d 32 29 3b 0a 09 09 0a 09 09 73 68 6f 77 53 63 68 65 64 75 6c 65 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 24 28 22 2e 73 63 72 6f 6c 6c 2d 62 75 74 74 6f 6e 2d 65 76 65 6e 74 2d 63 61 72 64 20 6c 69 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 61 6d 31 20 3d 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 72 65 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 61 6d 32 20 3d 20 24 28 74 68 69 73 29 2e 74 65 78 74 28 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 63 6c 6f 73 65 73 74 28 27 2e 73 63 72 Data Ascii: ).prev().html(param2);showSchedule(); }); $(".scroll-button-event-card li").click(function(e){ e.preventDefault(); var param1 = $(this).attr('rel'); var param2 = $(this).text(); $(this).closest('.scr
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 65 64 75 6c 65 22 29 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 28 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 3a 22 35 34 30 70 78 22 0a 20 20 20 20 20 20 20 20 74 68 65 6d 65 3a 20 22 73 2d 65 76 65 6e 74 22 2c 0a 20 20 20 20 20 20 20 20 6d 6f 75 73 65 57 68 65 65 6c 3a 7b 20 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 7d 29 3b 0a 09 0a 20 20 20 20 2f 2a 24 28 22 23 6c 6f 61 64 6d 6f 72 65 5f 62 6c 6f 63 6b 22 29 2e 64 65 6c 65 67 61 74 65 28 22 23 62 74 6e 5f 73 68 6f 77 73 63 68 65 64 75 6c 65 22 2c 20 22 63 6c 69 63 6b 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 24 28 22 23 73 63 68 65 64 75 6c 65 5f 75 6c 22 29 2e Data Ascii: edule").mCustomScrollbar({ // setTop:"540px" theme: "s-event", mouseWheel:{ preventDefault: true }, }); /*$("#loadmore_block").delegate("#btn_showschedule", "click", function(){ $("#schedule_ul").
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 3d 20 37 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 24 28 27 23 27 20 2b 20 24 28 69 74 65 6d 29 2e 61 74 74 72 28 27 69 64 27 29 20 2b 27 20 2e 69 74 65 6d 5f 73 6c 69 64 65 72 27 29 2e 73 6c 69 64 65 72 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 53 6c 69 64 65 73 3a 20 6d 69 6e 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 64 69 63 61 74 6f 72 3a 20 24 28 27 23 27 20 2b 20 24 28 69 74 65 6d 29 2e 61 74 74 72 28 27 69 64 27 29 20 2b 27 20 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 54 65 78 74 3a 20 27 3c 61 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 73 2d 30 20 63 6f 6c 2d 73 6d 2d 31 20 62 78 2d 63 6f 6e 74 72 6f 6c 73 2d 64 69 72 65 63 74 69 6f 6e 20 62 78 2d 6e 65 78 Data Ascii: = 7; } $('#' + $(item).attr('id') +' .item_slider').slider({ minSlides: min, indicator: $('#' + $(item).attr('id') +' .list-inline'), prevText: '<a class="col-xs-0 col-sm-1 bx-controls-direction bx-nex
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 6d 61 72 67 69 6e 20 3d 20 34 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 5f 64 6f 63 20 3d 20 77 20 2d 20 28 70 61 64 64 69 6e 67 20 2a 20 32 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 5f 6c 69 20 3d 20 77 5f 64 6f 63 20 2f 20 35 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 78 70 61 67 65 20 3d 20 6c 65 6e 67 74 68 20 2d 20 35 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 67 65 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 73 6c 69 64 65 27 29 2e 77 69 64 74 68 28 77 5f 64 6f 63 29 3b 0a 20 20 20 20 20 20 20 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 73 6c 69 64 65 20 6c 69 27 29 2e 77 69 64 74 68 28 77 5f 6c 69 29 3b 0a 20 20 20 20 20 20 20 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 73 6c 69 64 65 20 75 6c 27 29 2e 77 69 64 Data Ascii: margin = 4; var w_doc = w - (padding * 2); var w_li = w_doc / 5; var maxpage = length - 5; var page = 0; obj.find('.slide').width(w_doc); obj.find('.slide li').width(w_li); obj.find('.slide ul').wid
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 7b 0a 09 09 09 09 69 66 28 70 61 67 65 20 3e 20 30 29 7b 0a 09 09 09 09 09 70 61 67 65 20 3d 20 70 61 67 65 20 2d 20 31 3b 0a 09 09 09 09 09 6f 62 6a 2e 61 74 74 72 28 27 63 6c 69 63 6b 27 2c 20 70 61 67 65 29 3b 0a 09 09 09 09 09 24 28 27 2e 73 6c 69 64 65 5f 73 69 6d 70 6c 65 20 2e 73 6c 69 64 65 20 75 6c 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0a 09 09 09 09 09 09 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 3a 20 22 2b 3d 22 20 2b 20 77 5f 6c 69 2c 0a 09 09 09 09 09 7d 2c 20 35 30 30 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 09 2f 2f 20 41 6e 69 6d 61 74 69 6f 6e 20 63 6f 6d 70 6c 65 74 65 2e 0a 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 69 66 28 70 61 67 65 20 3d 3d 20 30 29 7b 0a 09 09 09 09 09 09 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 72 65 76 Data Ascii: {if(page > 0){page = page - 1;obj.attr('click', page);$('.slide_simple .slide ul').animate({"margin-left": "+=" + w_li,}, 500, function() {// Animation complete.});if(page == 0){obj.find('.prev
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 20 20 20 24 28 22 23 73 65 61 72 63 68 5f 6b 65 79 77 6f 72 64 22 29 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 73 65 61 72 63 68 28 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 30 30 2c 0a 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 0a 20 20 20 20 20 20 20 20 75 72 6c 3a 20 68 6f 73 74 20 2b 20 22 2f 74 69 6d 2d 6b 69 65 6d 2f 61 75 74 6f 22 2c 0a 20 20 20 20 20 20 20 20 6d 61 78 68 65 69 67 68 74 3a 20 34 32 38 2c 0a 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 22 70 61 67 65 3d 73 65 61 72 63 68 5f 61 75 74 6f 22 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 24 28 27 2e 74 6f 70 6d 65 6e 75 5f 6c 69 73 74 5f 69 74 65 6d 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 Data Ascii: $("#search_keyword").autocompletesearch({ width: 400, method: "POST", url: host + "/tim-kiem/auto", maxheight: 428, data: "page=search_auto" }); $('.topmenu_list_item').click(function(){
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 63 73 73 28 27 6d 61 78 2d 68 65 69 67 68 74 27 2c 20 27 31 30 30 70 78 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 63 73 73 28 27 6d 69 6e 2d 77 69 64 74 68 27 2c 20 27 31 30 30 25 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 63 73 73 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 2c 20 27 61 6c 6c 20 30 2e 35 73 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 34 30 30 29 3b 0a 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 74 69 6d 65 6f 75 74 27 2c 20 74 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 24 28 27 61 2e 73 6f 72 74 5f 70 6f 73 74 27 29 2e Data Ascii: nction() { self.hide(); self.css('max-height', '100px'); self.css('min-width', '100%'); self.css('transition', 'all 0.5s'); }, 400); $(this).data('timeout', t); }); $('a.sort_post').
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 29 7b 0a 20 20 20 20 20 20 20 20 24 28 27 68 74 6d 6c 2c 20 62 6f 64 79 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 28 24 28 22 2e 66 69 72 73 74 5f 67 72 6f 75 70 22 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 36 30 29 0a 20 20 20 20 20 20 20 20 7d 2c 20 32 30 30 30 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 24 28 22 23 6c 69 67 68 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 69 66 28 24 28 22 23 6c 69 67 68 74 22 29 2e 68 61 73 43 6c 61 73 73 28 22 74 75 72 6e 6f 6e 2d 6c 69 67 68 74 22 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 70 61 67 65 2d 6c 6f 61 64 69 6e 67 2d 6f 76 65 72 6c 61 79 22 29 2e 61 64 64 43 6c 61 73 Data Ascii: ){ $('html, body').animate({ scrollTop: ($(".first_group").offset().top - 60) }, 2000); }); $("#light").click(function(){ if($("#light").hasClass("turnon-light")){ $("#page-loading-overlay").addClas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49809	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:55 UTC	355	OUT	GET /js/jquery-1.11.1.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:55 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:55 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 73 56 6a 4d 63 43 64 6f 61 59 6a 65 4c 6e 52 33 63 44 6b 72 48 79 46 33 69 46 39 41 68 2f 64 6d 79 64 79 45 41 47 79 57 32 52 63 41 6d 31 36 32 6b 72 78 77 53 71 75 49 30 37 37 6f 36 37 56 77 4b 75 71 6b 49 6e 64 78 44 75 41 6f 6c 49 59 6a 4a 54 47 50 2b 4c 51 2f 38 2b 4a 52 71 43 74 63 58 77 69 4c 6e 62 39 55 52 77 45 3d 24 53 62 4b 5a 71 55 2f 35 72 58 69 57 70 56 38 57 51 69 6c 63 50 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: sVjMcCdoaYjeLnR3cDkrHyF3iF9Ah/dmydyEAGyW2RcAm162krxwSquI077o67VwKuqkIndxDuAolIYjJTGP+LQ/8+JRqCtcXwiLnb9URwE=$SbKZqU/5rXiWpV8WQilcPA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 32 32 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2238<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 6e 4e 5a 75 53 68 37 65 48 51 31 4c 4c 57 73 46 54 6f 6a 2e 75 55 65 6a 65 6a 45 41 66 4a 4c 59 39 32 6a 6a 6c 61 59 5f 50 4e 57 75 68 64 32 77 51 6b 69 62 35 55 4c 31 70 59 46 59 56 6b 6a 67 55 59 54 48 34 77 4b 43 54 59 78 65 52 50 53 47 74 68 4b 38 61 4a 58 6c 55 4a 67 78 77 55 4d 4c 33 4f 77 65 62 6a 44 50 4f 47 66 46 45 49 65 63 4c 5a 4a 47 47 47 45 47 66 39 31 45 76 66 4a 2e 50 54 35 4a 63 44 73 38 6f 39 6b 36 76 34 45 67 37 77 4f 70 58 56 6a 69 47 79 33 51 4f 6c 43 39 31 53 31 30 78 35 51 56 44 6e 6c 6e 48 2e 32 73 69 48 47 32 41 6e 69 4c 73 4a 56 64 30 65 44 6f 6a 4e 55 79 69 44 42 4d 49 4b 5a 7a 6f 7a 76 38 6b 67 44 5f 30 62 4b 68 37 74 61 58 72 33 6a 65 5f 62 46 35 63 78 77 38 71 30 47 59 43 30 77 4d 78 65 66 42 70 38 50 70 56 44 79 67 35 51 65 Data Ascii: nNZuSh7eHQ1LLWsFToj.uUejejEAfJLY92jjlaY_PNWuhd2wQkib5UL1pYFYVkjgUYTH4wKCTYxeRPSGthK8aJXlUJgxwUML3OwebjDPOGfFEIecLZJGGGEGf91EvfJ.PT5JcDs8o9k6v4Eg7wOpXVjiGy3QOlC91S10x5QVDnlnH.2siHG2AniLsJVd0eDojNUyiDBMIKZzozv8kgD_0bKh7taXr3je_bF5cxw8q0GYC0wMxefBp8PpVDyg5Qe
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 55 48 4d 6c 53 76 55 79 65 71 33 61 62 6f 49 78 41 63 6f 47 6a 77 32 4e 64 4c 6f 67 43 36 76 37 38 62 72 42 5f 65 61 72 52 4b 32 6c 2e 73 51 62 62 50 56 42 7a 4d 68 77 7a 4e 52 43 30 4a 34 59 39 6a 63 4a 58 54 52 6a 6b 75 34 78 70 32 74 55 43 6d 65 46 51 51 42 4e 58 53 79 51 6d 57 63 4f 75 4e 75 56 75 6c 44 78 55 38 4c 59 43 41 73 32 77 5a 75 66 6c 48 49 4e 45 4c 51 64 62 71 34 6a 69 31 59 65 44 35 49 4c 73 71 42 61 57 62 38 35 4c 62 65 48 78 61 6b 68 6b 59 70 53 39 46 6d 39 73 6a 6e 78 52 43 39 48 37 38 79 6f 4b 57 61 37 42 52 77 47 72 37 5f 68 44 74 4a 66 61 6b 75 39 62 7a 7a 6e 77 56 71 69 5a 51 54 39 31 62 72 4a 46 6e 5a 4d 71 70 68 70 51 4c 78 39 39 33 6a 72 5a 4d 4b 73 38 45 65 42 58 37 5f 77 47 7a 74 63 4a 6e 73 63 53 70 46 62 74 37 6e 43 54 6c 73 Data Ascii: UHMlSvUyeq3aboIxAcoGjw2NdLogC6v78brB_earRK2l.sQbbPVBzMhwzNRC0J4Y9jcJXTRjku4xp2tUCmeFQQBNXSyQmWcOuNuVulDxU8LYCAs2wZuflHINELQdbq4ji1YeD5ILsqBaWb85LbeHxakhkYpS9Fm9sjnxRC9H78yoKWa7BRwGr7_hDtJfaku9bzznwVqiZQT91brJFnZMqphpQLx993jrZMKs8EeBX7_wGztcJnscSpFbt7nCTls
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 4d 53 42 6d 63 5f 53 41 63 6b 45 4c 54 71 75 45 71 56 4c 50 79 58 55 7a 5f 77 34 2e 61 70 4e 5f 42 65 5a 71 72 6a 78 5f 6d 53 4b 55 52 32 4a 38 77 4c 30 32 6c 6a 58 41 38 35 5f 74 74 54 45 73 79 6d 59 36 38 2e 78 72 56 6c 45 64 43 54 41 4a 48 6d 77 50 4d 66 72 78 67 45 41 4d 73 33 79 37 35 63 35 6c 71 5f 58 48 57 46 5a 31 66 67 4c 52 70 78 58 7a 78 50 32 76 30 51 57 51 61 57 50 4b 39 77 32 7a 6e 56 45 42 42 69 4b 4d 49 68 39 44 41 74 75 37 6b 67 30 63 69 56 35 70 30 62 59 65 57 38 6a 70 55 58 49 58 42 32 43 42 68 6c 48 7a 46 6b 33 34 4b 59 67 56 59 41 33 6e 77 78 75 43 70 68 64 37 31 48 32 52 58 6c 45 38 43 56 69 39 4f 6a 61 77 61 36 44 64 52 65 4c 39 43 65 79 78 66 5f 47 2e 46 33 66 47 50 42 4b 6d 49 78 75 58 6b 6a 5f 61 4c 34 31 4c 58 53 4c 67 33 79 37 Data Ascii: MSBmc_SAckELTquEqVLPyXUz_w4.apN_BeZqrjx_mSKUR2J8wL02ljXA85_ttTEsymY68.xrVlEdCTAJHmwPMfrxgEAMs3y75c5lq_XHWFZ1fgLRpxXzxP2v0QWQaWPK9w2znVEBBiKMIh9DAtu7kg0ciV5p0bYeW8jpUXIXB2CBhlHzFk34KYgVYA3nwxuCphd71H2RXlE8CVi9Ojawa6DdReL9Ceyxf_G.F3fGPBKmIxuXkj_aL41LXSLg3y7
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 62 70 6a 67 68 30 31 5f 55 32 5f 34 43 51 38 4e 6c 71 31 6a 63 4c 6e 4c 76 41 35 78 58 64 44 4a 72 65 57 2e 54 4a 52 49 34 66 72 43 50 37 5f 35 58 35 79 4a 6e 57 54 30 76 45 43 73 7a 34 57 4a 30 78 68 41 62 41 38 5f 6f 31 48 56 57 72 52 78 73 66 61 77 62 4c 6e 61 55 51 58 42 4b 75 48 6b 70 5f 44 34 43 30 54 50 69 36 68 54 47 62 4d 71 48 77 78 4d 51 61 6b 6f 44 42 69 36 6e 5f 76 43 31 47 73 5f 54 41 66 41 76 41 72 4b 58 5a 4c 4c 62 37 34 70 36 6e 69 54 46 53 79 6f 6f 71 30 6b 44 35 62 57 45 53 56 47 6f 37 79 4e 78 6f 2e 52 79 4d 65 6a 6f 62 4b 76 78 7a 41 74 72 68 4d 42 56 61 39 4b 5a 71 63 49 52 64 6f 59 37 36 70 62 6a 66 34 63 65 6d 6d 4e 43 32 36 4f 72 5f 2e 38 77 51 36 38 7a 39 7a 35 6f 4e 78 49 79 65 4f 4d 6b 7a 42 49 6d 55 38 71 2e 76 52 33 74 41 45 Data Ascii: bpjgh01_U2_4CQ8Nlq1jcLnLvA5xXdDJreW.TJRI4frCP7_5X5yJnWT0vECsz4WJ0xhAbA8_o1HVWrRxsfawbLnaUQXBKuHkp_D4C0TPi6hTGbMqHwxMQakoDBi6n_vC1Gs_TAfAvArKXZLLb74p6niTFSyooq0kD5bWESVGo7yNxo.RyMejobKvxzAtrhMBVa9KZqcIRdoY76pbjf4cemmNC26Or_.8wQ68z9z5oNxIyeOMkzBImU8q.vR3tAE
2024-12-17 10:51:55 UTC	554	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 6a 71 75 65 72 79 2d 31 2e 31 31 2e 31 2e 6d 69 6e 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c Data Ascii: .indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/jquery-1.11.1.min.js?__cf_chl
2024-12-17 10:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49811	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:55 UTC	1377	OUT	GET /images/bg.jpg HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/css/main.css?v=4.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:55 UTC	892	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: image/jpeg Content-Length: 1066 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:11 GMT ETag: "42a-59c3157079ac0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5500 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zv9Rn8bdgwNIyjnf9RBuzYJie8nQXuB2imdyqhqD5qum66LdJKp4g%2FAqW6%2FjTO0xIS8GcguXoXoZkir8Yw9kNmsYlCUQJtFejTQMWUtcEOFXrPzSGuHDPelm2Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c585de86a53-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1895&min_rtt=1751&rtt_var=945&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1955&delivery_rate=1005509&cwnd=215&unsent_bytes=0&cid=e29594666346f646&ts=452&x=0"
2024-12-17 10:51:55 UTC	477	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 54 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 02 01 01 01 01 01 02 01 01 02 03 02 02 02 03 03 02 02 02 02 03 04 03 03 03 03 03 04 05 04 04 04 04 04 04 05 05 06 06 06 06 06 05 08 08 08 08 08 08 0b 0b 0b 0b 0b 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 02 02 02 04 03 04 07 05 05 07 0b 08 07 08 0b 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 29 00 29 03 01 11 00 02 11 01 03 11 01 ff c4 00 7e 00 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 09 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFddDuckyTAdobed))~
2024-12-17 10:51:55 UTC	589	IN	Data Raw: c9 f5 4a be 70 fb dc 17 a3 b3 2b d7 f0 85 8a a7 7a 95 2d 51 dc d1 3a 06 1b 48 24 0e 60 8d 0c 69 1c f8 20 71 71 2e b6 cb 14 58 5c 31 f1 36 d8 1a 0c 12 bb 9e 0e 8c 0f 4d 39 74 f8 20 b9 7d e7 b6 51 75 6e 6a 7c 98 0c 16 da d0 30 5f 82 e0 31 d7 f4 70 2d 02 9b fb c5 57 e4 0d 8a bb 85 63 6d 9b 85 8a 48 8d fa e8 22 7a 4f b2 08 36 0d 9e 02 9b ed 66 2a aa bb ac 75 60 ce 4e 81 46 a5 49 11 a4 4f 3d 0f c6 04 fc 58 fd 57 2b ee cd fb dc 0d 45 e2 5c a8 33 aa 1b ad 52 c8 1d 55 84 89 05 7d 00 74 de c7 af c6 dc 34 1c 05 d9 eb dc ad c4 ad b1 81 4d 41 c8 51 0c 4a 6d 92 07 23 d4 88 1a f0 19 fc aa f8 c7 b1 d5 e0 40 8d c1 80 f8 d3 ac f0 20 fb 3d 98 96 77 fc d3 80 be 8c 28 7b 11 a5 19 8c 74 8f 3f 5e 04 1e 4d 97 5f 9a fe 2a 10 94 cb d5 a9 00 05 12 8d 3c b5 e6 09 10 b1 11 af 01 cf Data Ascii: Jp+z-Q:H$`i qq.X\16M9t }Qunj\|0_1p-WcmH"zO6fu`NFIO=XW+E\3RU}t4MAQJm#@ =w({t?^M_<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49812	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:55 UTC	357	OUT	GET /js/jquery.bxslider.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:55 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:55 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4b 74 6e 63 62 32 6c 4f 6a 51 4b 56 66 43 41 74 4d 4a 45 46 5a 36 75 2b 49 38 70 6a 36 6e 6d 36 6e 37 34 48 63 62 2b 79 6e 4c 46 4e 71 71 43 75 4b 62 6d 42 4f 54 33 4a 41 71 58 64 68 58 5a 78 48 70 36 54 6b 74 71 61 75 69 42 57 78 48 65 2b 4d 70 6f 53 53 49 38 79 6e 4b 56 59 38 78 6a 39 36 31 49 5a 37 43 65 58 6a 48 51 3d 24 41 65 66 65 70 78 39 57 4f 54 76 46 34 57 42 70 35 58 6a 59 61 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: Ktncb2lOjQKVfCAtMJEFZ6u+I8pj6nm6n74Hcb+ynLFNqqCuKbmBOT3JAqXdhXZxHp6TktqauiBWxHe+MpoSSI8ynKVY8xj961IZ7CeXjHQ=$Aefepx9WOTvF4WBp5XjYaA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 32 32 33 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 223e<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 55 76 67 6e 67 67 75 4d 4a 39 7a 44 69 35 61 6d 39 67 53 79 39 70 67 7a 54 6a 38 36 30 6e 52 4f 50 71 62 50 47 4f 71 54 32 69 66 7a 6f 52 74 4b 50 68 49 48 31 30 79 6c 69 4e 31 79 54 38 37 43 32 2e 69 44 47 52 67 70 70 52 53 46 68 62 4c 6a 56 49 55 43 66 44 75 46 5f 54 76 78 56 63 50 76 77 67 57 74 48 4a 48 73 67 71 62 42 45 70 65 31 35 5a 50 74 4c 72 57 34 42 2e 5f 62 35 51 4f 79 42 53 42 45 73 77 4f 41 46 7a 59 46 42 78 4b 59 4d 48 6e 64 41 41 64 42 43 70 2e 45 59 34 79 32 4f 6a 34 31 4a 74 4b 64 77 4e 5a 74 7a 45 58 67 32 50 37 73 2e 6f 57 6e 71 45 57 67 72 5f 66 51 43 4e 51 79 34 30 76 33 44 46 61 6a 57 4a 48 76 43 54 34 54 34 5a 5f 51 55 56 70 38 72 59 57 44 49 58 2e 48 71 78 38 76 73 65 61 68 70 4f 72 74 47 34 7a 41 6a 62 37 46 64 6c 69 66 62 75 30 Data Ascii: UvgngguMJ9zDi5am9gSy9pgzTj860nROPqbPGOqT2ifzoRtKPhIH10yliN1yT87C2.iDGRgppRSFhbLjVIUCfDuF_TvxVcPvwgWtHJHsgqbBEpe15ZPtLrW4B._b5QOyBSBEswOAFzYFBxKYMHndAAdBCp.EY4y2Oj41JtKdwNZtzEXg2P7s.oWnqEWgr_fQCNQy40v3DFajWJHvCT4T4Z_QUVp8rYWDIX.Hqx8vseahpOrtG4zAjb7Fdlifbu0
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 57 33 31 6a 52 33 6d 78 7a 5f 6c 67 63 4a 6f 5f 46 67 4a 6c 41 63 49 74 57 4a 6d 65 59 77 69 4f 72 77 64 51 31 6a 2e 38 6e 73 5a 41 64 76 4e 58 41 4e 36 57 47 4e 48 5f 2e 4a 79 44 63 77 38 77 59 65 65 6d 69 34 35 4d 4d 6d 77 37 56 53 4e 56 41 74 78 61 45 5a 47 73 31 64 6f 4e 34 66 6f 32 70 63 73 69 43 4b 41 36 71 36 6d 76 78 76 45 67 79 78 4a 64 44 32 58 39 35 4b 55 52 70 6d 33 4e 78 47 42 36 68 48 62 56 51 72 64 56 54 49 32 62 71 50 68 71 45 50 32 70 69 50 71 4e 73 4b 63 6d 4b 31 6b 6b 78 5f 55 52 36 54 6a 56 4d 58 37 51 67 76 44 4e 38 6a 51 42 69 72 65 32 53 68 5f 6f 4e 4f 73 44 64 74 4e 61 48 78 49 71 70 51 54 66 6d 6a 6e 45 57 6d 31 4f 72 52 35 65 66 64 6d 5f 54 42 42 4a 6d 7a 4b 79 58 65 73 61 2e 53 4d 76 66 45 4c 57 64 63 5a 54 54 68 61 75 62 74 39 Data Ascii: W31jR3mxz_lgcJo_FgJlAcItWJmeYwiOrwdQ1j.8nsZAdvNXAN6WGNH_.JyDcw8wYeemi45MMmw7VSNVAtxaEZGs1doN4fo2pcsiCKA6q6mvxvEgyxJdD2X95KURpm3NxGB6hHbVQrdVTI2bqPhqEP2piPqNsKcmK1kkx_UR6TjVMX7QgvDN8jQBire2Sh_oNOsDdtNaHxIqpQTfmjnEWm1OrR5efdm_TBBJmzKyXesa.SMvfELWdcZTThaubt9
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 6c 7a 66 62 6f 63 52 4d 4d 50 63 4f 61 4f 48 30 52 34 38 39 32 4e 4b 72 6e 67 6e 53 4e 76 4b 61 33 65 58 77 42 54 71 6e 37 57 54 5a 53 6f 59 6b 48 5f 61 57 51 38 65 32 48 76 33 30 33 76 73 72 56 6e 30 32 62 69 4b 32 46 65 64 66 45 67 50 51 52 38 6f 2e 56 32 48 43 4c 77 67 41 4d 6b 37 53 43 68 7a 49 70 42 78 6d 44 61 46 33 70 63 41 41 51 69 66 4e 54 6a 38 33 69 33 50 54 72 52 53 36 48 4a 62 71 6c 4e 56 30 43 76 4d 73 69 62 78 31 46 49 4e 51 37 65 63 37 31 51 5f 44 46 4f 38 49 33 72 49 68 43 37 45 2e 61 43 6b 37 47 56 55 43 71 5f 66 64 58 31 50 5a 69 55 70 35 73 4b 39 4c 4c 6f 66 71 64 71 44 68 75 76 75 2e 69 65 64 58 55 58 63 78 4d 51 50 30 58 79 7a 45 75 4f 51 62 6f 55 44 66 58 6f 54 4b 6e 44 6f 78 32 38 53 4c 36 6c 68 51 5a 4e 48 59 74 4d 2e 54 47 70 50 Data Ascii: lzfbocRMMPcOaOH0R4892NKrngnSNvKa3eXwBTqn7WTZSoYkH_aWQ8e2Hv303vsrVn02biK2FedfEgPQR8o.V2HCLwgAMk7SChzIpBxmDaF3pcAAQifNTj83i3PTrRS6HJbqlNV0CvMsibx1FINQ7ec71Q_DFO8I3rIhC7E.aCk7GVUCq_fdX1PZiUp5sK9LLofqdqDhuvu.iedXUXcxMQP0XyzEuOQboUDfXoTKnDox28SL6lhQZNHYtM.TGpP
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 7a 48 67 4b 55 69 6a 79 61 57 4e 63 71 61 79 54 64 56 6a 55 71 67 55 51 69 5a 45 39 76 6d 62 42 65 31 66 4d 34 55 58 4d 43 78 34 6a 73 74 69 37 45 66 48 6c 57 51 35 4c 6e 58 46 63 34 68 5f 61 4e 4a 69 62 59 2e 66 5f 50 5a 39 49 37 36 68 43 6c 43 56 78 50 58 59 71 36 69 6a 56 7a 50 70 65 49 6c 46 73 71 6c 6a 4a 62 6f 64 69 71 35 38 66 56 5f 78 73 6d 69 50 55 50 34 48 54 46 61 44 70 4e 47 5a 7a 4b 5f 51 48 6c 6e 75 34 72 52 79 71 33 4c 57 57 35 33 48 67 44 6d 50 44 49 38 72 4b 79 41 48 62 59 34 61 56 67 73 51 31 48 70 78 4f 4b 68 39 33 79 6e 74 62 53 6c 56 51 63 4e 51 47 51 67 56 76 2e 4a 66 6c 55 4c 32 75 55 43 79 66 5f 53 66 6b 38 4d 6f 58 51 31 6a 73 77 34 4b 6e 79 6a 65 46 65 31 6b 36 68 36 35 57 54 4c 54 4f 31 6f 6e 6f 47 56 74 51 56 7a 51 6d 67 2e 77 Data Ascii: zHgKUijyaWNcqayTdVjUqgUQiZE9vmbBe1fM4UXMCx4jsti7EfHlWQ5LnXFc4h_aNJibY.f_PZ9I76hClCVxPXYq6ijVzPpeIlFsqljJbodiq58fV_xsmiPUP4HTFaDpNGZzK_QHlnu4rRyq3LWW53HgDmPDI8rKyAHbY4aVgsQ1HpxOKh93yntbSlVQcNQGQgVv.JflUL2uUCyf_Sfk8MoXQ1jsw4KnyjeFe1k6h65WTLTO1onoGVtQVzQmg.w
2024-12-17 10:51:55 UTC	560	IN	Data Raw: 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 6a 71 75 65 72 79 2e 62 78 73 6c 69 64 65 72 2e 6d 69 6e 2e 6a 73 3f 5f 5f Data Ascii: gth).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/jquery.bxslider.min.js?__
2024-12-17 10:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49813	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:55 UTC	372	OUT	GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:55 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:55 UTC	904	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4f 39 72 52 65 6c 59 33 31 6b 71 48 65 72 46 43 71 64 46 34 45 75 44 53 52 33 36 4b 66 6c 72 76 6c 6a 47 51 43 65 62 41 68 4b 78 74 41 44 53 34 58 58 2b 38 41 6d 4c 30 6d 32 39 44 4b 38 6d 74 66 6a 43 78 56 53 57 4e 68 37 57 43 4d 7a 69 2f 52 61 41 68 46 2b 71 65 51 33 37 44 5a 64 4d 49 6e 70 42 58 2f 46 55 6e 4c 7a 30 3d 24 44 35 39 4c 45 4e 78 61 5a 70 58 4a 69 30 64 38 46 7a 47 73 73 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: O9rRelY31kqHerFCqdF4EuDSR36KflrvljGQCebAhKxtADS4XX+8AmL0m29DK8mtfjCxVSWNh7WCMzi/RaAhF+qeQ37DZdMInpBX/FUnLz0=$D59LENxaZpXJi0d8FzGssA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:55 UTC	549	IN	Data Raw: 32 32 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2296<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f Data Ascii: or Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{fo
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 20 63 6f 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 61 6c 6c 75 63 2e 63 6f 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 38 66 33 36 35 63 35 39 61 65 30 39 34 33 62 32 27 2c 63 48 3a 20 27 6d 45 66 5f 54 39 47 5f 46 39 52 6a 55 4f 7a 53 51 66 5f 59 64 72 78 50 68 6b 68 63 33 62 42 58 58 74 76 58 6c 69 58 36 50 50 34 2d 31 37 33 34 34 33 32 37 31 35 2d 31 2e 32 2e 31 2e 31 2d 37 71 4b 66 77 2e 4a 79 34 4b 50 7a 4a 36 4d 45 4c 5f 4f 4b 46 Data Ascii: cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "alluc.co",cType: 'managed',cRay: '8f365c59ae0943b2',cH: 'mEf_T9G_F9RjUOzSQf_YdrxPhkhc3bBXXtvXliX6PP4-1734432715-1.2.1.1-7qKfw.Jy4KPzJ6MEL_OKF
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 68 54 4d 42 4f 6b 74 51 57 74 78 58 6b 57 4b 34 6b 63 50 4e 34 2e 46 6e 32 76 30 31 59 62 55 5f 46 45 61 4e 53 55 45 33 65 63 41 79 4c 34 7a 44 44 59 41 4e 4c 59 56 43 52 6c 63 55 6d 6f 54 56 6a 64 5f 30 4c 66 78 73 4c 31 78 37 47 37 43 6a 53 77 6a 61 54 46 74 4f 33 69 33 32 66 42 2e 61 48 2e 68 59 51 39 6c 52 76 6c 6d 49 32 53 37 4d 67 58 67 48 5f 4d 4d 38 72 49 6e 76 44 49 2e 5a 64 67 30 44 38 4b 6c 59 65 7a 79 39 71 6f 58 74 48 41 36 41 55 6e 54 4c 55 4b 73 6f 66 65 72 51 6b 6d 4c 4d 64 6d 43 41 41 73 52 36 6a 72 7a 6c 66 4e 6d 59 64 5a 66 4e 49 36 6b 38 36 77 59 69 4b 31 4e 4b 46 48 71 58 37 52 70 75 39 61 4c 45 48 35 48 72 55 47 54 41 53 53 43 36 48 4e 56 67 35 35 6e 75 54 5a 73 68 6a 69 55 43 41 32 70 49 68 6a 57 48 37 66 71 52 5a 6f 46 4b 2e 48 62 Data Ascii: hTMBOktQWtxXkWK4kcPN4.Fn2v01YbU_FEaNSUE3ecAyL4zDDYANLYVCRlcUmoTVjd_0LfxsL1x7G7CjSwjaTFtO3i32fB.aH.hYQ9lRvlmI2S7MgXgH_MM8rInvDI.Zdg0D8KlYezy9qoXtHA6AUnTLUKsoferQkmLMdmCAAsR6jrzlfNmYdZfNI6k86wYiK1NKFHqX7Rpu9aLEH5HrUGTASSC6HNVg55nuTZshjiUCA2pIhjWH7fqRZoFK.Hb
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 4d 73 6c 56 2e 47 59 6b 65 41 64 70 51 52 6e 69 59 73 31 63 37 4a 44 62 50 4b 35 70 2e 74 69 35 31 4e 30 52 4b 6e 6d 4a 30 2e 6a 44 70 43 4e 70 75 6c 53 74 78 45 42 43 58 39 34 30 48 52 50 38 59 79 71 49 72 54 52 48 78 73 47 42 71 69 4f 64 6b 4c 70 4d 45 63 6d 38 6d 38 6a 4e 67 61 39 41 5f 4b 4f 67 69 2e 6d 46 52 53 45 4f 64 36 77 4f 70 64 4f 4d 33 4f 4b 74 44 6a 41 38 4c 43 38 70 6e 2e 74 5a 48 53 5f 54 65 41 66 48 47 56 30 41 42 75 6c 30 52 6c 79 6e 67 4c 42 69 56 4d 6b 65 67 6a 70 46 31 53 67 4b 52 4b 6d 43 39 65 46 4b 66 6d 46 56 74 71 68 69 71 55 45 36 68 55 48 2e 76 35 58 5a 66 55 4d 67 63 46 71 39 35 45 78 65 4c 58 71 4e 6d 78 42 56 44 34 43 62 66 4e 4f 52 72 39 46 4c 4a 62 75 63 4a 76 6b 47 34 31 67 48 33 4a 32 4d 34 4a 49 78 32 59 77 50 38 48 4f Data Ascii: MslV.GYkeAdpQRniYs1c7JDbPK5p.ti51N0RKnmJ0.jDpCNpulStxEBCX940HRP8YyqIrTRHxsGBqiOdkLpMEcm8m8jNga9A_KOgi.mFRSEOd6wOpdOM3OKtDjA8LC8pn.tZHS_TeAfHGV0ABul0RlyngLBiVMkegjpF1SgKRKmC9eFKfmFVtqhiqUE6hUH.v5XZfUMgcFq95ExeLXqNmxBVD4CbfNORr9FLJbucJvkG41gH3J2M4JIx2YwP8HO
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 55 73 4a 65 69 77 4f 37 35 77 30 65 35 72 51 2e 46 30 56 72 78 45 6a 62 4c 77 55 34 53 36 41 70 39 4a 55 37 59 38 54 2e 34 62 63 4a 62 53 70 6b 2e 38 48 6f 4c 76 50 6d 62 71 66 4d 32 5f 45 75 54 42 33 37 42 50 32 55 77 38 77 48 51 30 4e 6c 62 6c 39 31 6f 70 79 64 6f 7a 52 6f 34 69 49 71 62 77 44 4a 4e 4f 75 59 34 76 30 66 44 31 31 59 71 49 62 69 54 76 78 61 4b 32 35 68 77 6b 47 43 4c 36 67 67 2e 44 6b 38 7a 63 50 41 76 69 42 73 67 4d 5f 62 63 49 2e 30 57 62 4c 75 56 47 31 44 39 4f 4d 2e 2e 4c 63 65 4c 73 68 30 57 70 37 6c 68 39 6c 59 4e 47 70 4e 4d 6e 43 71 61 6b 51 6a 37 77 79 72 73 33 56 50 71 41 56 32 67 61 43 56 43 71 35 37 4f 53 34 4a 69 5a 4e 2e 61 47 6f 58 2e 6e 35 59 37 33 59 45 77 4c 69 6c 54 55 74 39 46 6b 36 69 43 38 71 38 54 33 70 6c 74 6c 38 Data Ascii: UsJeiwO75w0e5rQ.F0VrxEjbLwU4S6Ap9JU7Y8T.4bcJbSpk.8HoLvPmbqfM2_EuTB37BP2Uw8wHQ0Nlbl91opydozRo4iIqbwDJNOuY4v0fD11YqIbiTvxaK25hwkGCL6gg.Dk8zcPAviBsgM_bcI.0WbLuVG1D9OM..LceLsh0Wp7lh9lYNGpNMnCqakQj7wyrs3VPqAV2gaCVCq57OS4JiZN.aGoX.n5Y73YEwLilTUt9Fk6iC8q8T3pltl8
2024-12-17 10:51:55 UTC	1369	IN	Data Raw: 47 6c 65 4e 41 57 71 77 47 54 48 4b 34 56 7a 56 44 74 77 46 6e 66 37 61 55 42 57 41 38 54 79 56 73 54 63 77 33 38 4c 32 38 6e 41 41 5f 6e 4e 2e 51 34 36 66 66 56 5f 58 4e 33 6b 65 38 41 70 4d 2e 37 67 64 4e 6e 39 53 42 74 63 48 76 6c 7a 6b 76 6a 53 63 79 55 6c 48 62 71 37 34 58 74 6e 57 72 49 6d 4d 44 45 6d 79 62 30 4c 31 74 4b 73 46 71 4a 4e 56 68 5f 4e 38 48 31 43 4a 52 31 5f 2e 2e 34 39 57 6e 58 31 76 6a 33 66 70 67 48 68 45 4d 42 74 58 4c 31 58 34 41 71 31 5a 69 46 32 55 78 76 50 6f 4b 58 52 61 49 61 49 75 42 62 31 55 68 51 64 4b 4b 77 43 36 30 31 50 34 6c 4c 34 4a 5f 7a 38 35 5a 65 64 34 52 53 49 4e 70 55 34 6a 45 33 50 7a 4a 6b 48 6f 62 43 48 72 77 4b 49 61 70 45 4d 72 56 5a 52 51 42 33 59 48 63 43 52 72 71 57 71 4c 33 59 46 5f 32 75 46 36 43 78 35 Data Ascii: GleNAWqwGTHK4VzVDtwFnf7aUBWA8TyVsTcw38L28nAA_nN.Q46ffV_XN3ke8ApM.7gdNn9SBtcHvlzkvjScyUlHbq74XtnWrImMDEmyb0L1tKsFqJNVh_N8H1CJR1_..49WnX1vj3fpgHhEMBtXL1X4Aq1ZiF2UxvPoKXRaIaIuBb1UhQdKKwC601P4lL4J_z85Zed4RSINpU4jE3PzJkHobCHrwKIapEMrVZRQB3YHcCRrqWqL3YF_2uF6Cx5
2024-12-17 10:51:55 UTC	99	IN	Data Raw: 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ll, ogU);}}document.getElementsByTagName('head')[0].appendChild(cpo);}());</script></body></html>
2024-12-17 10:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49824	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:56 UTC	630	OUT	GET /movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:57 UTC	920	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:57 GMT Content-Type: image/jpeg Content-Length: 18607 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:28 GMT ETag: "48af-6295bc7aabe82" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3372 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UxA%2F6xwJyhz%2FBlpx0%2FICRzYD0v3877igDy6uCGJENEZYcN4kmshse42VJSUIXEe%2BI%2BP98qzMGK7l4HfiNodyY5ItWOyEGiAyjXNHkmk3YIEr9kpEEmbnyqY8rQjI1Pg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c62d9b6c33b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1493&min_rtt=1474&rtt_var=591&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1208&delivery_rate=1794714&cwnd=171&unsent_bytes=0&cid=7826f28a25e30379&ts=448&x=0"
2024-12-17 10:51:57 UTC	449	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 00 02 05 03 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 a7 77 2c c7 70 f4 9c 3c 30 8f 70 c8 1d Data Ascii: JFIF.$ $.5--5@99@QMQjj.$ $.5--5@99@QMQjjJ"4w,p<0p
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: db 12 3d c1 db c8 27 15 3a c9 41 46 0e 3e b4 4d 52 38 02 ff 00 37 4a b8 61 5a ee fe b9 61 c1 e7 4a 9b b6 c0 6d 68 d6 2f 1e 7e d8 2f ac b4 c8 4f aa ae 37 72 73 34 be de 5b 2e 7b 53 8a 57 0c c2 75 8f 2f 71 ae 69 f9 92 da d1 d3 de 7c f5 1b 7c 7c d5 70 d7 d3 b6 5e 19 5a 77 15 db ad 70 c0 1a 54 1e 00 b5 6c ba 0b 09 bc 59 ae 64 d0 90 da 37 7a bd 59 cf 1d 85 36 9a 75 41 4e bb 95 ff 00 2a 71 9f 48 dc f1 fb 8b e9 d7 e7 29 16 17 53 d7 5f 65 52 99 dc ad 79 fc 55 3d ce 1a 2e c1 83 db fa d1 9a d6 b4 38 2d 48 a0 5a eb 8e 0a c8 08 6a 2c 49 d8 7b a2 f5 b0 4e ab 4a 47 55 e9 a9 16 5e ba 10 ef df 1e eb 46 6a b4 4b b2 9d e5 33 b6 b7 95 79 c0 67 9a 8c f5 5a c4 15 45 0d 5c fd 5d d6 5b 6d e7 5c e5 e6 8d 57 69 6b b3 78 19 2c 0f 45 73 4d 81 f8 27 4d 81 98 5b 67 cb 67 cd 65 22 b5 Data Ascii: =':AF>MR87JaZaJmh/~/O7rs4[.{SWu/qi\|\|\|p^ZwpTlYd7zY6uAN*qH)S_eRyU=.8-HZj,I{NJGU^FjK3ygZE\][m\Wikx,EsM'M[gge"
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 31 ac 7d 39 ff 00 b6 bf f5 e0 23 25 5b 1f 2c 98 90 2e 84 5e c3 39 d3 a9 56 2a 7e 7c 31 ae 3a ad 42 7b 0d c6 24 ce 98 54 a3 07 08 f8 cb 3c 1b f5 f4 cf f7 0d a4 b1 55 e4 e3 62 ac 72 25 dd bf cb 7a e3 7e a4 31 d4 af 04 1d 6b 27 26 55 c9 cf 6d 18 f4 b5 8e 7b e9 a1 e9 e1 40 f5 94 ed e9 fb 7c 12 22 df 8d 49 1f 13 8d 76 d7 6f 05 f9 d4 69 2a fa 95 72 21 af 1f 4d 2c 27 aa 29 6b f0 b5 4c 1d 43 12 a1 05 fe c6 88 88 ba b2 76 d6 db b7 5a dc ad a5 7a cb 97 9b f4 d6 df 55 fa 4f 24 92 be ed b0 3d 0e 94 a9 27 56 b4 71 12 47 a7 4f 2b 6d f4 d2 b8 1c 5e 47 2d df be 01 ef db 41 bd 43 5b 1c d1 99 fc b4 9f 64 d5 6f bc ee 1a 27 c9 a3 65 00 3d 16 c5 1d b6 69 e4 44 55 f5 b4 26 35 7f 2b 58 48 85 25 65 32 4f 4e 3e 9e e5 0a 47 61 e3 69 de 57 65 e3 f9 d4 4b cd c0 d2 44 14 a6 35 6a 30 Data Ascii: 1}9#%[,.^9V~\|1:B{$T<Ubr%z~1k'&Um{@\|"Ivoir!M,')kLCvZzUO$='VqGO+m^G-AC[do'e=iDU&5+XH%e2ON>GaiWeKD5j0
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 47 1d d5 ac 49 69 bb 90 9a 81 79 4b c0 f6 31 ca f5 f9 37 f9 57 b5 e6 13 8d 79 3a 4e f4 52 65 97 cd 42 c8 f5 68 ca 92 48 6b d8 49 8c 53 2f 2f 82 0f 0e 4d 91 f0 88 a9 c7 07 d5 34 1d 7a 52 ce bf cd 18 03 0c 06 5a 72 61 82 15 51 cd e6 89 d3 ee 18 27 c3 6e 48 bc 8c 8e fd f5 49 04 9b 70 e2 06 3c 9c 9d 77 0a be 9d d5 e3 5e 8d 68 57 bf f3 45 43 aa e7 35 f6 9d b5 15 d9 6b e7 52 f9 4b 30 24 29 2a 79 91 d2 92 59 ae 4d 1f b4 f5 66 9e 95 ab 3d 31 24 90 6c 33 98 7a cd 80 9b 62 d8 16 8f 97 e7 ab 32 ca 90 48 6c 2f bf 73 77 54 d8 21 89 1b df 4a ee 80 bb 0c 6b 94 88 fd a3 0a c4 33 b7 a8 92 76 4a bc de 41 8c 8b d5 2d 4c be 5d 24 e1 5c ed 16 11 8b 09 41 d3 2f 52 bc ac e8 4c f1 ce e2 3f 5c 67 8d 79 2c 79 b8 89 05 57 6f 82 e4 77 9e 54 4f 6f 74 a6 29 5b 28 bd e1 1d 53 12 f0 74 Data Ascii: GIiyK17Wy:NReBhHkIS//M4zRZraQ'nHIp<w^hWEC5kRK0$)*yYMf=1$l3zb2Hl/swT!Jk3vJA-L]$\A/RL?\gy,yWowTOot)[(St
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: e7 c3 96 8d 87 54 a5 02 fa 74 ac e5 f8 c4 15 52 4b d6 09 e9 4a c4 96 c7 06 76 04 eb 6a 87 a6 e6 79 94 f2 b3 61 0a 1c 3f a6 dd ae bf b6 9d 92 9e dd 7e 7e 3c 61 56 5b 71 3c 13 b4 45 b9 69 ab 06 93 97 20 ba ea 49 1b e1 48 c5 2a c2 d9 fc 6a 75 58 33 c7 b9 88 33 b7 32 7b ec 69 ff 00 11 8b 5f a8 6a 0a db 94 bc 3e cf d3 1b 77 9a bb d6 71 ed 36 b7 0b 29 5e 22 4e 84 57 16 3e bc eb ed d5 22 78 de a8 2a 75 2c 52 b4 f1 c2 08 e3 6e fb f9 91 26 40 3b 95 83 56 54 23 1c 25 72 ee cd 9c 9c 6b 3a ce ad 17 e7 b7 f1 19 63 65 d3 a0 dd 4e 53 4f 34 72 44 27 6e 31 bd cd d3 10 62 07 91 65 ab 7e 97 03 ed 4b cd da 3b 32 74 da 46 3a 8b 67 5e 04 f3 73 aa ac e9 2c 6a 87 1a fd 42 1c c7 5a 43 10 01 25 01 54 e7 49 83 86 c6 bf 4a c6 1a 7f 52 eb 74 84 a0 1a 8b 21 fe 7b 6c b2 b2 ee f0 e3 e3 Data Ascii: TtRKJvjya?~~<aV[q<Ei IHjuX332{i_j>wq6)^"NW>"xu,Rn&@;VT#%rk:ceNSO4rD'n1be~K;2tF:g^s,jBZC%TIJRt!{l
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 8c 86 99 1d 6b d7 0c 31 a3 8f 15 1c 98 28 d4 51 43 0f 00 ec 02 b4 90 bb 61 40 c0 b4 0d 68 9b 9e 64 8a 60 20 03 e3 57 3b 44 ea 8e 35 b7 34 95 d2 52 b1 f5 34 2b 43 d4 05 98 72 86 90 b8 8c c2 62 ba a7 4a c4 ad 20 f3 4a 07 f4 de 94 6e 56 f3 e2 6d 96 bc 28 8e 1f 32 4b b7 ff 00 6d 97 b0 5c 2d 28 17 10 3d e1 d7 83 6a f7 5f ad 39 69 29 d4 96 5e f2 5b 39 96 84 89 11 78 2d 62 33 0c b0 ac 52 19 cc 82 43 cb db 2a 09 15 0f 71 d7 60 d3 c5 34 3c 4c a5 4a dd f2 e2 28 c8 60 75 e7 c3 22 2f 14 06 ce f3 2b c4 91 a0 d4 ae 5a 28 f2 72 7c 07 87 5d f8 70 3d c0 9d c9 3f 3a af 2a fb a1 dd 46 a1 93 02 40 c0 85 13 29 31 e7 1a 3c 19 3d 44 e3 a7 56 15 91 d5 5c 0a f3 18 63 55 d5 79 3a 21 50 1d 2d 86 30 1c 9d 35 86 90 94 3a f3 65 d5 8e 7b 4a 23 67 eb 12 39 f9 a2 1d 7b f7 ea b4 53 9d 09 Data Ascii: k1(QCa@hd` W;D54R4+CrbJ JnVm(2Km\-(=j_9i)^[9x-b3RCq`4<LJ(`u"/+Z(r\|]p=?:F@)1<=DV\cUy:!P-05:e{J#g9{S
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: d6 1c 59 66 2a 6f 6e 32 50 3a c8 3e cd e9 01 5a 13 76 f8 39 78 e6 89 32 d6 d6 bb e8 10 31 33 0e ba 72 43 bb 64 2a e2 77 8c 02 7b 81 81 94 60 d1 aa b2 60 7d cf 7a 92 17 57 40 45 de 45 a3 65 7f 8c 11 9e bc 8a 8a b0 01 f3 40 d1 5b 5d 11 f0 b5 d7 93 2b 64 e0 00 17 b4 31 93 93 18 43 9a ec 5a 66 a4 a2 da 90 a7 1e 48 ba 4e d2 20 ab 47 45 ad 9f b8 0f b4 36 4f 9e ae d0 36 a7 63 b8 56 63 3c 0e a3 91 5d 6c 46 08 3e d7 e9 d8 63 66 35 39 05 00 8d 43 72 85 6f 75 d6 a7 dd 6e 4c 56 c6 f3 98 08 92 d6 20 25 e3 58 ee b6 93 09 b6 d5 0c d0 65 f6 57 9d 81 8c 32 00 a3 5a 91 c5 b0 0a e7 f2 9e d2 22 4d 29 7b 07 23 c6 5a fe f3 ce 15 29 ee 0c c2 38 8d 13 2c d8 cb 3f f4 b8 70 53 d0 fa 72 09 9d f7 ce 0e 76 a3 dd 57 0b 7a c6 49 37 77 e8 60 c3 74 34 4e ae 81 ba 84 13 b2 d4 67 e2 53 fb Data Ascii: Yfon2P:>Zv9x213rCdw{``}zW@EEe@[]+d1CZfHN GE6O6cVc<]lF>cf59CrounLV %XeW2Z"M){#Z)8,?pSrvWzI7w`t4NgS
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 1e a8 36 a4 6d 45 d7 c8 02 a5 d9 c0 e4 8b 8f 5c f6 c8 0e ce 3c 14 cc ca c5 a5 a2 a7 98 d5 6c d4 05 24 a3 7d b7 a6 7e 28 4e 04 15 a2 b8 e5 1a a8 57 e3 cc 42 17 81 31 85 66 0a bb 7e d2 ee 45 da af 89 c1 60 d0 04 80 ba d6 3a 39 39 31 cf 68 f0 54 11 e1 52 9a dc 1a e3 40 b8 da e0 72 22 14 76 3f 84 b3 68 f5 25 43 a2 bc 8c ae a8 96 8d c6 6a c1 e2 09 ad e7 0a 61 9d 55 c7 12 e8 ba 64 d2 08 ad 2a af 06 da 81 4b c4 d6 56 e8 23 c5 03 28 a2 04 15 0a e9 e8 12 9f 32 74 00 49 3e 08 b6 5d 83 1d 39 3e 9a a7 1a 87 02 7f e4 14 e9 27 d4 a3 8b e0 50 20 5d 13 46 70 1c f6 45 c5 c1 a0 61 fd d5 01 1b 38 23 b7 9a eb 2d 81 de a2 bd 9f e1 c4 a8 70 f2 01 ca f8 13 eb 0a d4 07 07 62 01 35 f3 50 c0 d6 60 75 c1 38 1c 44 9c 71 94 ea 09 35 07 dd 29 b8 ea 16 43 41 90 44 23 74 98 39 27 10 e7 Data Ascii: 6mE\<l$}~(NWB1f~E`:991hTR@r"v?h%CjaUd*KV#(2tI>]9>'P ]FpEa8#-pb5P`u8Dq5)CAD#t9'
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 64 4d 81 30 8f c2 d3 0b 59 66 28 b5 2a 05 b1 aa 24 3d 92 9d 7c 1c 6c c8 fc 95 e0 82 b8 0f c0 2c 44 6e 58 c1 9e 23 cd 51 51 81 ae 08 d4 31 72 96 06 6c 31 b9 56 45 13 21 dc dc 12 1a 4c 84 10 15 c4 7d 41 52 ea e6 b9 08 95 71 4d 0d b8 74 ef ea 37 d9 09 2d aa a4 10 8d 9e 6a fc 93 5a bf 32 8b 8a 57 7b cd 4b 78 87 1b 52 be 63 57 07 e1 2e 01 e9 2f 04 80 6a e9 a9 5f ac 5f 6e 0c 71 4e ff 00 a1 12 35 37 24 79 5a ff 00 01 2a 56 da fb 10 36 35 04 f5 0b a1 e6 37 b3 12 1a f3 16 2a de df cd 7e 10 fe b1 74 2c 57 63 b0 03 45 da 40 fe 0f e9 06 b7 d2 18 5e d3 e8 8f ec 55 9d 6f db a0 ff 00 91 0d 9e a8 bd cf 1f 44 4e b7 38 78 95 d4 04 5b be 90 b6 fd 0d 63 04 da 8e 1e 6f 0f f4 12 a7 5b 1c bc 1f 56 ea 54 25 16 ab 1f e6 ff 00 f2 2e 7e 9f e3 93 f9 23 16 a0 b6 ca b4 5a f1 16 48 4f Data Ascii: dM0Yf($=\|l,DnX#QQ1rl1VE!L}ARqMt7-jZ2W{KxRcW./j__nqN57$yZV657*~t,WcE@^UoDN8x[co[VT%.~#ZHO
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 92 a8 f3 9a b9 6c 00 c2 7a e2 09 b0 86 82 db a9 f2 0c b8 2d 89 9b 2f 80 f2 d7 58 d7 98 83 aa 96 8e c1 e8 96 bc 36 fb f6 f5 2a 65 61 00 14 9c 25 4e 05 4f b6 de 73 ad e0 39 22 01 ce 1c 67 80 f1 34 60 ae ed 8f 03 cf 01 1e 3b 89 6f 92 d0 3d f9 8e bd 7e 55 92 83 4c 60 f9 17 e4 ea 36 77 38 43 2e 94 00 3d 8b dc 10 b7 6d 72 1b 15 43 28 c4 e2 dd 0d 7d b3 88 8b 9e d5 d2 0c 1b a3 74 22 72 35 94 fb 7a 87 fa 89 eb 02 9a c8 4e 64 99 8f a3 01 4a 6d 2b 2b 41 85 a1 82 ae 44 d8 b6 61 20 c1 75 47 27 cc 1b f6 db 44 3c cf b8 d0 c6 38 d5 9a 1f 76 fe 08 fd ea 93 b9 75 7a 21 2a ee a4 2b 92 ae 34 4a e2 6b e8 4f 1e e1 3a 8a 78 01 b3 ad 70 16 87 b0 ed 46 72 8d 38 4f ff 00 1c 53 5e 1e ee e8 58 28 b8 35 a7 06 18 b0 0e de 29 8a 5f f2 2c 51 b5 79 47 07 18 7b d9 86 d5 13 6d 76 7e d6 ca Data Ascii: lz-/X6ea%NOs9"g4`;o=~UL`6w8C.=mrC(}t"r5zNdJm++ADa uG'D<8vuz!+4JkO:xpFr8OS^X(5)_,QyG{mv~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49822	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:56 UTC	598	OUT	GET /movies/1231337707-poster-Tache.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:57 UTC	919	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:57 GMT Content-Type: image/jpeg Content-Length: 10129 Connection: close Last-Modified: Mon, 16 Dec 2024 04:39:30 GMT ETag: "2791-6295bc4288a89" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3372 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QyLnRWDVcZDYzX8Sey06FN9CnFW%2FNGnJN%2FJ4QWPRJ87dFWuwW7Uh5aOSdteAQWWvrnKDTQoWBjhqLP1PLlfQvqbKD%2FJZXHIpPhFt9V3O9BykIID%2FrbnAcS9YK0%2F5MeM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c62df77f799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1579&min_rtt=1528&rtt_var=610&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1176&delivery_rate=1910994&cwnd=92&unsent_bytes=0&cid=206cc81025b3cb11&ts=445&x=0"
2024-12-17 10:51:57 UTC	450	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 03 04 06 07 02 01 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 df d2 40 92 40 92 40 92 40 92 40 92 40 92 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwJ"4@@@@@@
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 29 72 26 0c ae 33 ec 4c e1 35 b7 7c 75 cc af cb 2e 65 ed ad a9 fa 93 0d 96 8a a6 64 3a db a0 c1 ab ca 7c 37 c3 f2 37 04 f2 67 90 0d c1 68 66 c5 ef d6 42 52 87 d3 a1 2b d6 79 3f 17 e9 cf 18 33 f2 fd 3c 76 bd 9b f9 ef 0a c8 df af b9 db 83 33 5d 3d 9e ca fc fd 55 d2 73 fa 73 d4 1b 79 fa 96 e3 55 eb 0f 37 51 ce e4 3c 94 06 cd b2 53 6d 6f 8b 3f 23 55 45 de a0 e6 d0 60 5f 85 d7 93 3e 8b a1 d3 9e 56 dd ef e3 bd 0f 8c fa 55 55 8c f9 db 33 a0 b3 69 a4 bc f3 c4 dc 77 44 cb 74 ce ff 00 62 aa 02 e2 ed bc 89 b9 36 fb 97 df 72 cb 5c 12 fc bd 47 e5 04 9c 97 9e db 51 db 08 37 05 fa 2b 89 89 ba b0 a1 1e 69 e3 4c e0 f7 ba b9 20 bd 4c 12 a5 e2 dd 89 5d a1 c9 ae 0c 9f 50 8f 4d d4 28 22 5b 14 fe 7e 6f af a6 73 03 08 4a 7a 18 08 96 3e 9c ce 2a bb ae 21 1e 91 de 85 71 6f 65 42 Data Ascii: )r&3L5\|u.ed:\|77ghfBR+y?3<v3]=UssyU7Q<Smo?#UE`_>VUU3iwDtb6r\GQ7+iL L]PM("[~osJz>*!qoeB
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: cf c7 9c 9a bd e7 c3 c3 a5 8c a5 31 8e ac 70 54 6a 94 41 98 2f 36 5b 29 28 33 82 20 0f 2c 02 90 95 bc 4a 20 83 04 b0 64 66 4a aa ce 0a a1 01 70 d5 ae d5 1d a7 10 a7 69 c7 c3 fe 21 e9 ab 12 d7 7d 53 2b a6 bb a0 da d3 fc 58 4a 02 9f 5f e7 d7 9e 11 92 b8 e8 c2 23 25 43 31 65 40 33 73 91 33 b6 d9 b2 d9 98 8c 11 ef 06 22 21 90 53 30 6c 0c 55 97 46 2e f9 46 2e ca 8e 16 e8 98 f6 e7 13 bf 35 dd 57 7e 96 bc ac ad d0 a3 f4 c2 c8 1b 0c 5a e2 06 67 b1 33 cf db 26 7f 23 31 31 f8 c9 9c 38 ce f3 7c 63 15 7c 22 31 c4 63 12 56 8a 7f 96 30 3b 8c 64 47 58 bf f6 19 fc c9 cf 8d 46 cc 0a 2c f9 4f 0f 01 76 c3 75 4a e5 4b ba 07 d9 60 3d 4f 28 a2 93 5a d8 12 50 2b eb 26 62 26 3a e9 8f 91 90 b6 39 f2 a3 06 c0 cc 5b bf 5a a8 58 e6 5a b0 2b dc 8a 95 e2 1b 75 0f 0e 01 93 34 6c 96 1e Data Ascii: 1pTjA/6[)(3 ,J dfJpi!}S+XJ_#%C1e@3s3"!S0lUF.F.5W~Zg3&#118\|c\|"1cV0;dGXF,OvuJK`=O(ZP+&b&:9[ZXZ+u4l
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 5e 55 d2 ea 0f 17 47 5b 8a d7 fc 0b 74 ed f7 87 64 04 76 16 25 93 b2 57 e5 a6 5e c8 22 35 f1 57 c8 be bd a8 5e 1b 85 c9 4d d3 0c 8b 28 7c 17 1e d5 b5 85 ac 7c 65 16 c4 15 52 02 16 bd 28 86 de 67 83 36 06 db 45 6e 49 d1 fa 57 e4 96 20 df c7 6e b2 95 80 5a 2c 85 aa c8 86 95 48 29 af 5e 3b 4a 7a 85 21 87 30 86 21 96 af ab c6 e3 a2 46 dc 4f a1 f1 fc a9 53 49 1a 66 12 b6 95 de a6 02 3b 1c 99 e8 81 f2 04 9b 92 32 1b 0f d6 96 ba cb e4 3d 75 96 c6 14 95 cb 3e 62 c2 f0 ca 0c f6 5b db bb d5 4b 71 32 47 5b af 0d 56 f6 6a c5 61 45 bc 2a 20 a8 5d 64 f4 15 44 a1 b2 94 c5 fb b2 d3 5c 13 a6 fb 02 61 c3 24 b3 89 9b 95 d8 42 29 74 2e d0 6c 55 af d7 ab 9b ec a5 94 77 03 b4 43 1b 0b c8 b8 4a 00 b2 24 2c 64 0c 11 7e 2d 5c 11 29 60 fa ec d8 86 1e 93 f9 2e 6e fa 62 b7 20 43 15 Data Ascii: ^UG[tdv%W^"5W^M(\|\|eR(g6EnIW nZ,H)^;Jz!0!FOSIf;2=u>b[Kq2G[VjaE* ]dD\a$B)t.lUwCJ$,d~-\)`.nb C
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 10 47 17 b3 f2 35 12 b9 13 de 44 ce b3 41 3e 7a 8d fd 2e 9e a7 9a c0 38 de f3 db 3a 2d c8 ae 34 5b bc fb 06 f6 4e 34 3b 8f 09 d0 6e 66 5b c7 37 72 fd af 17 e5 6d 71 f1 7e 5f ef b3 c5 79 87 cc ad c5 f9 58 08 71 4d eb 35 ae e1 5b e3 0f ec de 56 ab 63 c0 f9 81 3d bc 1f 95 05 56 70 ee 5b 36 13 c3 79 74 b6 a7 08 e4 bf 3d 9c 27 90 80 ff 00 63 f2 22 45 fe 07 c9 65 7c 57 8b 72 4a 55 7e cb bb cd 9e 83 7e ea 9a 2e 39 bf ae 8d af 16 dd 58 49 70 9e 4f df fa fa 8f eb d4 7f af a8 fe 9d 46 75 19 d4 7f d6 ff 00 ff c4 00 43 10 00 02 01 03 03 02 05 01 05 04 07 04 0b 00 00 00 01 02 00 03 11 21 04 12 31 41 51 05 10 13 22 61 71 20 32 35 81 91 23 52 92 93 06 14 15 24 42 62 82 34 60 72 d1 30 33 43 53 73 a1 b1 b2 b3 e1 f1 ff da 00 08 01 01 00 06 3f 00 ff 00 75 2e 34 74 8f d5 9a Data Ascii: G5DA>z.8:-4[N4;nf[7rmq~_yXqM5[Vc=Vp[6yt='c"Ee\|WrJU~~.9XIpOFuC!1AQ"aq 25#R$Bb4`r03CSs?u.4t
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 71 16 f2 a3 08 05 ae 66 e6 16 9b d0 e0 18 26 32 63 6d 3e e0 72 21 60 48 3f 13 6d e5 a3 3e 4c a5 58 2f fd a0 06 29 34 56 a5 3b 0d cb d4 41 ac d0 31 6a 44 7b 90 f2 b0 43 f6 01 ec 65 27 3d 62 b9 30 1b f9 f3 31 00 26 2b a0 cd a6 63 4a 62 99 c5 a0 20 cd f5 ea 85 bf 02 7f 59 a6 a4 23 18 08 3c cb de 0c c0 46 2f 29 b7 77 83 df 8b 64 4a b4 1b 28 d1 f5 1a 51 be 91 c9 51 c8 8c 33 71 d3 c8 41 07 d4 4a 23 e2 02 3e d1 66 36 02 6d bd 85 b0 21 1d cc 2b de 53 08 db ad 83 18 ec 72 3a 41 5a b5 50 cf d8 f4 85 2a 11 63 1a 91 37 53 f7 4c 2c a3 88 b7 16 26 05 e3 17 83 4c 2d e9 24 da 52 f1 08 b8 53 14 1c 82 04 35 74 e1 69 d7 b6 08 e1 a3 d2 aa 84 3a 9b 11 e6 83 e6 53 10 7d a3 4d 4f b5 4c f5 0b 64 45 d4 d3 37 2e b8 8c 6f fe 29 51 45 4f 75 e5 dd c5 fb 5e 2a fa b1 50 b8 6c c4 02 a0 Data Ascii: qf&2cm>r!`H?m>LX/)4V;A1jD{Ce'=b01&+cJb Y#<F/)wdJ(QQ3qAJ#>f6m!+Sr:AZPc7SL,&L-$RS5ti:S}MOLdE7.o)QEOu^Pl
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: d0 81 6f 53 b4 0b d8 09 4d ba 03 0f 62 25 6e ce 01 8a 7b ac 20 f7 f3 38 fb 29 ff 00 10 9c c0 3b ca d4 c3 62 8a 00 20 24 8d bb ac 4c a7 a6 2f be 99 1e ea 9d 49 94 99 5f d4 a0 f8 2e 38 04 c0 6d 7b 8e 67 39 eb 08 62 6d 2c 0d d2 90 b9 1d cf 69 ea 54 51 7e 80 74 89 65 b7 1d 25 60 5a c6 cd 10 b1 c2 c3 61 19 7a 89 b4 f2 26 9a a0 ff 00 10 22 53 26 63 bc 02 62 5f ca f6 86 6a 18 d7 a3 45 28 a2 bb bd 66 d8 a0 13 b7 98 34 da 2f 14 f0 da b5 be f0 44 af 73 65 8f 4a a7 8c 78 62 54 a6 4a ba b6 a0 02 ac 39 06 f2 bd 3a 8c ac 69 28 62 c8 6e a4 11 b8 58 c5 d1 d2 a5 ba ae aa a9 40 4f 03 e4 fc 09 e2 9a 2a e1 92 be 9e a1 46 5f 94 36 81 e8 d6 eb 62 08 89 a5 d3 69 db 52 f5 86 28 a0 dd 8e f3 fa ae bf c5 74 89 55 4d bd 30 cd 55 d3 ba b6 c0 61 1a 1d 76 9b 50 df f7 6a fb 1f f8 5a d1 Data Ascii: oSMb%n{ 8);b $L/I_.8m{g9bm,iTQ~te%`Zaz&"S&cb_jE(f4/DseJxbTJ9:i(bnX@O*F_6biR(tUM0UavPjZ
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 2b a5 ce 03 09 f8 7d 7f d2 3d 3a 7e 19 a8 62 4f 00 08 c9 5b c2 eb a6 7a 81 17 67 87 56 66 07 80 04 36 f0 6d 4f e8 3f df 1f ff c4 00 2d 11 00 02 02 02 02 00 05 03 03 04 03 00 00 00 00 00 01 02 00 11 03 21 12 31 04 10 13 41 51 22 32 61 05 20 52 14 23 30 71 40 91 b1 ff da 00 08 01 02 01 01 3f 00 ff 00 37 35 9e b2 7c c0 ea 7a 85 d4 40 c0 f5 e5 47 cf 26 64 c6 69 8c 0c 08 b1 32 78 8c 58 be e3 3f af f0 df ca 0f d4 3c 31 e9 8f fd 41 91 ae 72 5f 88 ae 04 d3 10 20 01 44 bf d9 fa 80 e3 87 98 16 44 c1 e3 f1 ba 05 36 1a 65 7e 4c 43 43 88 0b a6 b8 a1 90 92 25 4a 95 30 af 67 f6 d4 f1 63 fb 19 2c 7b 44 c4 3e f0 75 1d d1 8d 03 b8 3d 44 6a ad 18 55 9f 40 4a 8b bd 40 80 40 fc 75 3d 41 3d 45 9e aa cf 59 3e 60 c8 0c ca 3d 4c 6e bf 22 64 45 c6 a4 5d 18 88 81 39 01 f5 44 77 6e Data Ascii: +}=:~bO[zgVf6mO?-!1AQ"2a R#0q@?75\|z@G&di2xX?<1Ar_ DD6e~LCC%J0gc,{D>u=DjU@J@@u=A=EY>`=Ln"dE]9Dwn
2024-12-17 10:51:57 UTC	96	IN	Data Raw: f6 b3 2a e5 36 bb 43 7f a3 96 72 50 e2 6a ca a8 98 a3 2d 95 12 53 8c eb 9b b2 5b c6 90 e3 52 b5 ec 55 50 1b 7b 13 e5 57 85 c2 b1 c6 e9 a1 a2 84 8c 6a e7 cf 45 ca 39 2d 33 24 e5 b2 77 66 6c bb 42 0e 90 f2 5a 4b 51 4e 1b 63 e3 a1 64 7b dd 71 64 e7 72 7d 12 8b d9 9a ba 64 7a ff 00 9b ff d9 Data Ascii: *6CrPj-S[RUP{WjE9-3$wflBZKQNcd{qdr}dz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49825	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:56 UTC	610	OUT	GET /movies/12330989112-poster-Sinister-Surgeon.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:57 UTC	911	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:57 GMT Content-Type: image/jpeg Content-Length: 14640 Connection: close Last-Modified: Mon, 16 Dec 2024 04:39:18 GMT ETag: "3930-6295bc37708b0" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MUZ7tMygV2YZu39hneT4Q36g7HXZ5BHQsT8ip5ArV2fHQw8bED4vr07CVN7wH6YazN2LQ%2BoU9E8%2B1DnldePnPkgWNwq14TGhxg21UtESZp38FVBpA6ZiVhRqIWKlVpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c62eb0b8c2f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1818&min_rtt=1814&rtt_var=689&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1188&delivery_rate=1577525&cwnd=228&unsent_bytes=0&cid=9b3ce1eff0d30c0c&ts=912&x=0"
2024-12-17 10:51:57 UTC	458	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 01 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 cf 9d b1 5f 5b 95 53 3a 64 f9 4b 38 1b 3f Data Ascii: JFIF''#" "#>1++1>H<9<HWNNWmhm''#" "#>1++1>H<9<HWNNWmhmJ"4_[S:dK8?
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 64 da d5 16 53 ae 45 8f 2c 17 ce 84 41 76 c4 21 f8 f5 3a 46 9d e7 3e cc b2 ef 45 b1 c7 b7 30 99 a5 b7 53 ce e2 3e 83 ca 75 24 1d 6b 4e ae 74 af 93 d7 23 ae 31 2a 47 25 48 b7 3a 7f d6 5e 78 f4 7a e9 ae 49 f9 45 11 b9 c9 92 16 74 7f e6 0b 30 e8 0f 33 0e 2a 1d 54 a2 9d 87 20 d7 f0 f5 ee 1e aa b1 ca e9 49 75 30 06 a9 09 68 cd f8 dd 36 b9 99 ef e4 9c e8 71 f4 7e 7f 40 50 73 4f cc 41 e1 d7 62 93 7a fc 92 2b 3a f8 9a b9 9e 9e ef df 65 3f b9 d8 52 65 18 59 78 1d be ad 0f c5 94 a7 5f 84 43 a4 5d bc 39 8f ab 6f 32 88 9e eb 43 4c 4a 9c 3a 06 c4 13 6b d0 c9 5c 35 63 63 63 67 0e c8 5c 0b 40 04 50 5d cd bc 4f 3b 9a fc da b4 ba 3f 42 e8 c6 4d f7 df 67 9f 01 9c 79 f2 c8 1c 6a ea 8a 3e 78 d5 f3 01 75 28 b1 84 61 b6 99 e7 3a 6f 33 b3 48 47 7e f5 a0 38 58 ac 55 7a 6b 89 a1 Data Ascii: dSE,Av!:F>E0S>u$kNt#1G%H:^xzIEt03T Iu0h6q~@PsOAbz+:e?ReYx_C]9o2CLJ:k\5cccg\@P]O;?BMgyj>xu(a:o3HG~8XUzk
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 3a d1 26 62 ed cd 08 82 f8 ad 95 3b 2a 29 dd 57 48 a6 66 db e3 48 b7 8f 66 ef 9c 1a 2b 53 da a3 a9 e3 94 85 4b 32 fc 98 9a bb 4d 46 33 50 da f7 7c d4 d6 70 c6 bc ca 16 8c 60 b1 1d c0 6a 48 f6 d3 91 f1 40 12 29 ed e4 5f 2b 4b 1d 76 f9 a4 8d 87 c5 44 d2 46 c1 80 a8 6f 9d d3 c5 48 8c ee 5a 92 31 8f 34 22 1f 34 b0 cb 6d 26 f8 79 11 dd 86 fc 86 0f 75 3f 75 7d 89 97 19 a1 a7 39 1e 6a d5 1a 16 19 34 93 83 46 78 c7 cd 4d 72 ed ed 8c 54 16 fb 32 c7 f2 2b 5b 6a ea 78 6d e2 2f 2b 00 26 ea 4b 7b 75 65 8c 6e 6b cd 59 ee 13 04 f3 f5 0c 3f 12 73 fc a5 c9 4d 85 aa 1b cb 33 18 2c 76 ba dd d9 b2 83 b8 51 b2 8d d3 04 55 dd 9f 65 8d 28 a4 88 1f 9a 10 2f fe 20 8d 54 d3 a4 67 18 35 b0 56 da 02 b6 af ea b6 a1 a3 6e 8d f3 4d 03 67 0b 4b 68 3e 4d 7d 2a 63 cd 08 23 51 5b 54 56 05 Data Ascii: :&b;)WHfHf+SK2MF3P\|p`jH@)_+KvDFoHZ14"4m&yu?u}9j4FxMrT2+[jxm/+&K{uenkY?sM3,vQUe(/ Tg5VnMgKh>M}c#Q[TV
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 92 a9 29 0f b8 20 22 f1 77 ed 98 45 b4 47 13 dc 6d 11 26 6a e1 1d 3e d9 52 85 47 8f 15 a3 bf da db ba a2 f8 a4 00 0a 61 ed ac ee 90 e2 b5 4c 80 2b 49 60 fe 28 67 e6 ae 02 ed 35 28 1b cd 03 59 cd 58 60 ca 54 d3 f0 cc 28 54 46 ad 5f 63 1a d2 ff 00 e3 ed 7d 6f d9 85 bb 61 43 0b ce ff 00 86 da 29 16 27 90 46 cd b5 1d a6 6e 0f 02 57 93 b1 6e 0c 8a c9 61 65 3d ce e5 88 26 75 1d a9 72 13 78 92 a3 8d 48 3e dc 54 56 cd 6d 86 da 40 b4 6d ca 29 2a 6c 94 3f a4 96 da 39 3b 67 20 ea b7 76 be d5 6a b6 8b 64 d6 c5 15 94 fc 55 d7 e1 53 ca a2 43 cd 15 c5 0e 6a 34 64 c3 86 c1 95 01 f7 67 9a 43 cd 40 c6 ba 7a e8 4b 6c d1 1f cb d3 5c 67 58 17 dd 84 be 74 0a 89 19 a0 92 4b d9 dd b4 47 72 90 49 7b b6 03 88 ae 5a 44 71 09 8d 23 59 09 56 3b 58 60 86 e0 91 52 6e cf 39 15 6f ab 5e Data Ascii: ) "wEGm&j>RGaL+I`(g5(YX`T(TF_c}oaC)'FnWnae=&urxH>TVm@m)*l?9;g vjdUSCj4dgC@zKl\gXtKGrI{ZDq#YV;X`Rn9o^
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 25 b3 9c e5 ee 64 57 72 45 47 1b 4b 22 46 a3 2d 67 a4 69 d6 f1 2a b4 0b 23 cd 67 65 22 e0 db 2d 49 a7 5b 89 08 58 d5 29 a2 ed 0c a9 cd 34 c7 1e 6a e7 12 8e 7c a5 b1 27 96 18 82 35 ed 26 cc 9a 3e de 58 62 a2 bb 8f e2 64 35 ab 27 7a 3d c8 43 52 9c 52 b5 5b 5c 76 ce d3 e1 67 3f 15 29 62 8c d4 f6 e5 ac e4 98 d0 5f 6e 6a 46 39 14 c7 b9 17 b0 d5 84 6e b0 b0 95 f7 b0 36 1a 45 b3 b6 c5 85 2e 7a bc 6f c4 09 85 d5 d3 ea cc 17 d1 0c d0 fb 09 e7 dc 64 62 31 4d 5a 3c 61 0f d4 b2 16 2f ab c8 a7 98 4d 47 a9 77 70 14 73 72 19 a2 de bf 91 3b d7 22 a7 85 97 91 4d 9a 00 d5 a4 b2 a2 ec 53 8a fe 3a 17 fb 93 33 c8 7b ea 0b 24 31 f6 c5 82 06 85 83 0e 35 5b 23 6f 39 61 f8 29 ad f8 c0 1e 6c b6 b8 15 7c 8a 96 4e 6b b5 9d 33 8a 80 02 18 1a 90 12 46 2a 2b 38 21 95 de 14 22 ae ef 16 Data Ascii: %dWrEGK"F-gi#ge"-I[X)4j\|'5&>Xbd5'z=CRR[\vg?)b_njF9n6E.zodb1MZ<a/MGwpsr;"MS:3{$15[#o9a)l\|Nk3F+8!"
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 0f 16 a9 70 8e 3d d9 76 ea f9 c7 f6 e9 e0 7d 4d d5 5d c9 65 a3 5a 5c 5e c5 01 76 e9 a9 25 9e c2 ea e6 71 ef b0 d1 75 6b a8 a0 b9 df 0a 25 83 ad 9e 89 1b b7 b8 5b 6a 30 5f ea 36 bd b8 4a 55 e7 bb a9 20 ab 44 ff 00 a9 ee a8 31 79 06 87 76 3c f5 23 67 59 bb f4 ca d5 ad f5 cd 9c cb 35 bc 9d b7 b9 ea ad 6e e2 23 11 b9 0a 3a 56 eb b3 26 a6 99 ad 33 56 d4 ac d7 b5 6b 72 63 4b 4b db 9b 37 2f 6f 29 46 4d 57 50 11 98 7e a0 88 ed b5 bd 46 d9 3b 71 cb ec ba bd ba bc 70 f3 cb ba 9f 51 bd fa 6f a6 ef 1e cd be ab 7f 6b 1f 6e 09 ca 24 9a e6 aa fb 43 5d 13 53 de dd 5e 6d 37 12 ef 36 33 dd ea b2 c5 67 3d c1 ed 5a c0 ba 66 b9 0d bc 4e cc 91 db aa ea b7 12 81 56 08 87 a8 35 59 b1 ce 96 db 8d e3 9a 8e 43 a8 74 ac a5 70 5f 40 62 3a 72 49 09 ae 9e 92 53 a7 b9 77 2c 2e f2 9d 34 Data Ascii: p=v}M]eZ\^v%quk%[j0_6JU D1yv<#gY5n#:V&3VkrcKK7/o)FMWP~F;qpQokn$C]S^m763g=ZfNV5YCtp_@b:rISw,.4
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: d4 29 f5 1b bb 12 2a af 44 4e 29 cc 8b 41 f0 9e 68 cc b7 96 3c 91 c1 64 82 ba 34 37 d3 43 56 40 18 59 a9 c5 01 a8 c3 21 1c b5 3f ab e8 b6 94 68 d6 8c 49 4d b5 8a 60 29 82 6d 51 78 33 b4 84 d8 36 84 55 5c a1 1f 16 53 c5 47 82 db a7 15 00 f6 3f 11 59 9c 4f 25 b7 05 f9 90 cd ee 30 86 24 37 05 9c 49 84 68 37 95 10 46 13 cf 20 a4 92 76 93 8a ba 54 5e a2 7b e5 d6 93 90 4e 0d 8d 84 c5 54 6d c5 7a 29 4c 13 1a 33 58 ca db ae e4 56 c5 92 6d 24 89 69 8c 66 33 46 97 1a cc 15 4c bc a7 1f 04 7b ef 38 9d 01 b2 63 34 f1 0e 69 ef c6 e4 0f 56 f0 fa a7 48 63 4f bc ed c8 54 40 c5 38 ca 24 05 15 de 9e 64 7d 34 7b 87 e5 ad bd 46 83 90 58 86 fb aa d1 9e ee 4a 7b db 93 81 35 90 67 9a bc 03 9c 32 40 43 6b a9 29 a4 10 67 30 8e 0d e2 a7 14 d4 34 64 77 ac 0a 08 63 aa 51 60 bb d4 bd Data Ascii: )*DN)Ah<d47CV@Y!?hIM`)mQx36U\SG?YO%0$7Ih7F vT^{NTmz)L3XVm$if3FL{8c4iVHcOT@8$d}4{FXJ{5g2@Ck)g04dwcQ`
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 01 00 00 00 01 00 11 21 31 41 51 61 71 10 81 91 a1 b1 20 c1 d1 f0 f1 ff da 00 08 01 01 00 01 3f 10 28 6e 25 31 19 6f a9 60 07 2c 40 b0 c0 34 6d 22 70 a4 6a 63 d4 51 2b 30 f5 96 62 0e 00 10 85 44 04 59 d8 dc 06 95 c3 11 52 8e 22 65 0e d2 86 13 00 d4 f0 40 c5 48 30 4c e0 b8 b6 a0 62 8f 98 08 c7 13 2e f6 cb a4 e9 4e e2 58 4e 20 86 95 27 48 46 c9 98 67 1c 66 14 da 38 cb 15 8c 50 ce d4 96 0b 24 0b 25 27 14 b9 26 63 e2 98 31 6c dc 19 dd b8 5d ee df 81 50 12 3e f9 65 9d f3 09 a8 33 2e 74 0e 04 a1 60 2d 96 81 78 7c b1 d2 f1 f6 49 24 ec d3 1e 16 2d 6d 71 32 07 6c 18 b9 17 2b c2 64 0a 12 fc 92 97 10 30 c9 8f 22 5a 4a 8f e5 10 e1 14 8a 05 ee 02 8b c2 18 b6 18 00 46 4c 8e b8 e6 12 24 58 94 88 16 ce 08 36 af 3d 41 43 7b 82 e8 54 56 04 a0 88 d8 04 6e a8 63 70 a0 3a 7a Data Ascii: !1AQaq ?(n%1o`,@4m"pjcQ+0bDYR"e@H0Lb.NXN 'HFgf8P$%'&c1l]P>e3.t`-x\|I$-mq2l+d0"ZJFL$X6=AC{TVncp:z
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 2c 08 0a ab db cc 24 a1 37 88 23 8a 40 58 d5 0d 62 0a cc 18 ce 41 63 1a f2 e0 1c 2c 90 b2 98 80 5c 40 b0 ea 24 0a ab 25 62 76 d0 48 4c 00 a6 d9 94 b9 8f 51 e2 66 f4 be 7e 1b 2b 35 58 b5 72 e8 7f a1 15 ff 00 2f fe 99 9a 5a f2 97 fc 8d 33 9b 89 19 28 09 40 ac 8c 74 e9 19 7b 25 46 26 3f 5a 92 64 0e 65 63 28 70 b3 51 ab a1 17 2c 6e 0c 15 05 6c 10 b1 4a 3b 12 5d ea a1 1a 58 18 b9 c4 31 91 bd 16 be 29 97 f6 5e f4 0c 24 b0 8c b2 09 cf f5 61 4a 30 69 1f 82 5b a9 a5 af 11 be 70 51 d4 0c 38 b0 65 a6 d1 01 70 80 c0 52 30 d6 8c 1f 7e 48 5b 82 f4 cb ae 5b f6 cc ea a0 66 8c c2 a5 32 9c 23 15 2a a9 b8 71 b8 dd 5b fb 92 b3 57 82 cb f6 70 2a 53 40 bc 5c 20 a3 14 bb 9a ed 2b 8a 0f 1a ea cd f8 86 be b0 21 d1 ff 00 72 d6 97 94 c3 30 7d 53 9e 33 1e 92 29 3d 29 90 88 67 45 1c Data Ascii: ,$7#@XbAc,\@$%bvHLQf~+5Xr/Z3(@t{%F&?Zdec(pQ,nlJ;]X1)^$aJ0i[pQ8epR0~H[[f2#q[WpS@\ +!r0}S3)=)gE
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: d6 12 26 09 1e 52 bf 4e f6 02 4a e5 c0 ad 93 b9 1c fd b1 a3 9c d5 89 7f b2 97 64 1e 90 a6 84 b5 2f 4c f2 c6 44 a6 01 d2 61 9a af fd 9b fe a2 22 0c 63 1a 11 32 4e bf 1b f4 83 18 7b 33 1e 89 62 cc b8 8e 57 48 2c ee 15 b7 3e bc 81 69 f8 44 6e 3f c0 0c 10 57 dd cb 89 0f c4 71 1c f4 8a 08 79 c6 4a ec 1f 0e e8 c6 bb 2e 36 54 be 4b 0c ef 76 9e 02 08 fa 46 ab ca a4 a8 63 c6 25 c0 6b cb 18 3b a6 ae 37 ca 43 87 0b 8e 50 04 cc 9d 19 95 15 1f 9c 17 5a 5c e9 2d bc 31 45 88 26 31 33 b7 a7 e6 8b 6f 07 3f 00 7a d6 19 5a c3 7f 60 9a c0 bd 7a 99 cf 94 97 d4 2f bf 97 b7 c6 8c dd 9b 25 93 8b e9 1d ec c0 03 b1 04 32 25 fa a3 09 d3 33 25 9b 81 42 cf df f0 65 82 ac 3f 98 9c ae 3f 86 85 19 8b 2a 02 15 5c aa 4e d7 d1 13 bf d2 53 f4 ca 50 8a 14 6c 02 da c4 ad ca 0a 80 a6 2a 81 76 Data Ascii: &RNJd/LDa"c2N{3bWH,>iDn?WqyJ.6TKvFc%k;7CPZ\-1E&13o?zZ`z/%2%3%Be??\NSPlv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49823	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:56 UTC	603	OUT	GET /movies/12321158916-poster-Wineville.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:57 UTC	909	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:57 GMT Content-Type: image/jpeg Content-Length: 37227 Connection: close Last-Modified: Mon, 16 Dec 2024 04:38:13 GMT ETag: "916b-6295bbf933223" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEqrP55YpjYlavPlJWx2sE9X17NvetnstLRCRDuiSexnsMKdBi4CEccbwegAPq6jPN1aFx8QuJw5n14ucuPfmdc6Nc2iyFao7ha44K0vaTHweHjJNYB1%2FsADuUx3A6M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c62ea14729b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1817&min_rtt=1816&rtt_var=683&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1181&delivery_rate=1600877&cwnd=249&unsent_bytes=0&cid=00872f4bd32e67f3&ts=915&x=0"
2024-12-17 10:51:57 UTC	460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 00 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 00 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 24 77 73 ba 5c Data Ascii: JFIFC!"$"$CJ$ws\
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 22 bb f3 27 39 ad 97 2d 35 d7 2d a4 c8 31 92 c4 57 6e 3a 38 55 a9 5c c9 cc c8 b3 26 ef 77 bb bd dd 5d a7 3c c5 4a 8e 9d a3 de 74 6f 9f 3b e8 f8 5a 3f 3b e8 7c 01 d2 ae 45 8c f9 e3 4c d9 ed 53 51 d7 a0 b8 9c b9 69 07 7a 1a 9c 8d 5c 8b 2b 58 bf 9d dd 8f 2b 5e 56 b3 90 ad 6e ac aa 5a 36 59 76 d6 ea c8 fe 6d 40 a4 b3 fe 8f 8f ac f2 3e 8a bb 44 88 a4 8a ca 56 2b 57 3c 8c dd 9f 5d 44 78 ae 62 f4 76 1a 5b 96 82 a9 62 67 c0 33 26 3a 0a bd 71 4e f1 2a 54 4c 81 70 8d f2 78 8e 82 a5 61 12 97 b8 3d c8 94 4a f2 62 75 60 e5 13 cb 65 8d 73 d6 ad 7b 11 70 76 1a 6c 73 e8 13 92 a1 9a f0 29 37 21 41 51 2a 36 e5 a8 d7 82 61 c2 d2 90 20 79 c1 bb a0 44 81 3a db 63 f6 08 0f 38 77 8e a3 3c 29 ea a8 33 11 79 d8 be 87 28 b0 56 14 f4 22 6e 59 f0 9c 4d 4c 1b a8 fd 0c 68 5f 3d 6e 9c Data Ascii: "'9-5-1Wn:8U\&w]<Jto;Z?;\|ELSQiz\+X+^VnZ6Yvm@>DV+W<]Dxbv[bg3&:qNTLpxa=Jbu`es{pvls)7!AQ6a yD:c8w<)3y(V"nYMLh_=n
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 2a 46 c0 2d a0 9d 5c f6 aa b7 ae d1 8b 57 96 49 f6 8c fe a7 56 b9 9d 8d a0 57 bc c1 74 e8 e9 03 02 b1 3c 45 62 2b b3 3a 7b 80 28 83 64 ab d7 e5 5e e0 f6 d0 d5 e6 ee 71 dd 3e b5 25 39 72 3c 39 d8 ea fb 67 99 87 3d d5 a5 b3 fc f3 d5 ee 11 67 96 d5 7a b2 c1 92 04 11 5c 2f 33 a5 7c 3a 41 a2 56 cb 36 9e 10 a5 a3 da e3 75 b2 72 3e 8e 6f 56 2d 1e 6d 3a 92 31 f1 dd 79 9e 77 7e 7d f1 1e c8 fa 9f 9b 32 c9 68 cd 72 5e 85 11 a3 4c 2a d5 82 75 81 56 9c e0 0a 49 89 db a0 f0 82 2b 11 4d 94 da c6 98 f3 3a f0 20 cd 7d 2b df e5 5b ac c7 e9 5a 53 e0 83 d8 a8 ac be b1 f3 5a 30 fe c4 34 39 e9 a2 8a 66 74 db 11 e8 22 74 8c c7 0d 94 4d 32 06 9a b0 9e 73 5a 44 a5 b2 0b b4 14 7d a4 1c 59 a6 3d d6 38 e3 36 4b 62 ed 4e 8b f4 4f 23 42 1e 84 63 5a 89 92 a7 cb f4 2b 95 72 7e 89 88 d4 Data Ascii: F-\WIVWt<Eb+:{(d^q>%9r<9g=gz\/3\|:AV6ur>oV-m:1yw~}2hr^LuVI+M: }+[ZSZ049ft"tM2sZD}Y=86KbNO#BcZ+r~
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 8c 51 84 38 2a 05 39 51 57 b2 2e 9d 6e 92 95 5d 46 4e 8a d4 e2 82 b1 a3 d8 fa c4 99 ac 62 95 73 56 36 eb 2d cc 36 71 47 2d fa 23 42 27 9b 4d 0b 54 f3 45 02 de 4f 21 8e d1 24 13 da 72 c8 d5 80 d4 53 15 36 88 6f 6e 23 8e a7 91 de 45 8f 0d ee 14 c9 8a 6f 73 24 6a c5 d7 52 3e 3f a3 d5 6a 69 52 94 52 26 69 22 a4 b7 71 44 c9 25 08 6a e1 d2 04 9a ee 59 aa 30 24 7b c9 3e f2 dc 47 1b f9 19 aa d6 ea ee d6 a5 bc e4 69 ef 1f 01 f6 7c ab 34 4d db 03 97 52 b4 3d ac 80 6f 70 76 76 e8 83 f4 d8 d2 a7 49 18 cc 68 36 86 00 2b 4a 54 e8 26 6b 95 94 4d 75 8a 96 78 ad 11 b7 95 96 d9 98 45 68 4c 1e 2a 79 31 16 5a 42 b1 99 26 b9 40 2a 20 69 41 99 63 4f 2d 05 1e 59 4a a2 b2 90 aa b9 2e 3d cc 31 58 a4 19 a4 81 b5 e3 2d 5d 63 51 8a 45 ae 85 72 57 69 05 b9 cf 8e 6b c5 15 04 a9 10 b5 Data Ascii: Q89QW.n]FNbsV6-6qG-#B'MTEO!$rS6on#Eos$jR>?jiRR&i"qD%jY0${>Gi\|4MR=opvvIh6+JT&kMuxEhLy1ZB&@* iAcO-YJ.=1X-]cQErWik
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: ac ac f4 42 9e 9b b9 f0 5f fa 92 cc 98 20 97 6a f4 a5 ce d0 f3 97 97 2b 31 e2 f9 1b ba bf 81 ad 6e c6 30 f9 02 49 3d dd 6d 8a eb e9 1e 2b 22 bf b5 3a 52 36 f2 43 1c 26 71 fa 4b 77 7b ed 2f 2e a7 96 76 e1 38 c9 f9 56 e3 38 f6 b4 e5 fd 4f 04 96 d0 c2 d1 72 16 37 b6 f2 db 48 49 57 48 e2 e5 2c e3 e2 2f 5e ee 4b 73 c3 5c cd ca d8 c1 57 7c e5 cc 82 6d e4 72 ae 09 93 75 27 2b d1 a4 93 5a f2 66 87 e4 5b a1 9c af 1f 36 8b 69 6f 6a d2 ba 1b a9 50 25 0e 2a f5 ec 38 df 4e 71 72 8f 52 70 d2 71 b2 ff 00 c7 43 af 5c b9 8b 9b 82 df f5 9c 1f a3 a6 d2 3f 53 71 37 57 d7 76 1e 93 b5 41 c6 dd 27 18 39 0f 51 44 69 ef 6e 2e 99 9b 14 ac 75 5f 75 30 93 32 9c 9f a1 c7 d2 da de 79 6a 0e 28 32 89 22 b2 e4 27 e4 dc 87 95 d8 f1 be 9c bb b9 8e db 88 e3 6c d3 98 be 84 f1 bc 77 2b 79 61 Data Ascii: B_ j+1n0I=m+":R6C&qKw{/.v8V8Or7HIWH,/^Ks\W\|mru'+Zf[6iojP%*8NqrRpqC\?Sq7WvA'9QDin.u_u02yj(2"'lw+ya
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: be f9 a4 aa 89 72 29 d6 c3 43 af 7d 91 dc a2 89 27 15 64 a5 69 91 b3 42 12 16 c4 e5 4a cc 70 7a b5 31 4d 79 2c d5 62 9d 99 73 c6 1c 93 c9 29 49 9a 77 ed 65 15 ee a2 28 a2 8d 8d 31 5c 0c 4b ef b2 32 4f e5 44 a6 97 27 a8 e5 c2 22 e5 1e 49 39 2e 09 66 74 39 6f 6c d4 36 5f b9 77 51 34 f6 72 2c 6f b2 5d a5 91 40 de 5c 0b 0b 7e 05 0f d9 24 a0 89 64 bd 97 04 9f 92 4f 4a b2 2e fb 37 4e 8b af 65 0f d8 dd 17 25 cb ec df 65 b7 26 e4 b3 2e 20 26 97 26 26 b5 0e 4f d5 af b2 59 34 3a 1e 47 2d cb ae 49 af a3 7b 65 79 2c 7f a3 6e cf dd ab ec 94 a7 ab 6e 0f 5d 3e 3b 7a 91 b3 d4 1e 66 4f 23 6b 71 69 6b 63 54 45 2f 06 24 a5 2d cc d8 9c b8 44 62 d7 23 82 a3 56 f4 5c 60 a8 c6 d3 de c6 41 ea ef 77 ee 9e 79 78 67 a9 25 bf d8 9f d8 b3 c9 ec c6 f7 b2 8a 2d 8a c7 b0 8e 9b 1d 7c 99 Data Ascii: r)C}'diBJpz1My,bs)Iwe(1\K2OD'"I9.ft9ol6_wQ4r,o]@\~$dOJ.7Ne%e&. &&&OY4:G-I{ey,nn]>;zfO#kqikcTE/$-Db#V\`Awyxg%-\|
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 66 df da 3b 63 28 45 fd 8d 90 e8 e0 f1 ea 93 17 f1 af 91 ea ef 6b 92 db e4 73 49 17 be c7 23 b3 13 6b 81 a4 f7 20 a2 91 19 7d ee 41 45 ad d0 dd 6a 8c 59 2a 96 f6 5b c6 47 24 64 ac d7 be c8 bb 1b 6b 82 15 7b 8f 4f 84 36 fc 8b 76 63 c1 ea ee 2c 17 26 af 83 0c 22 b2 38 3e 4e a3 a5 8e 4d fc 98 31 b5 fc 73 5c 1d 56 37 1d 87 5e 59 4a ec 94 45 1b e1 14 ae 9b 1f 1b 09 78 34 2f 04 62 bc 72 38 bd 5b 9a e3 54 99 99 c2 50 d3 43 8a d1 ae 88 fc d7 e8 79 e0 bf 12 19 a0 e3 68 f5 e2 88 e1 d5 e4 f4 f1 c5 19 23 ab f1 3a 64 b2 bd 32 32 62 d4 b4 40 e8 d7 f1 b4 fc 31 e4 96 3e a3 e3 e4 ea a2 e2 d6 58 f8 ff 00 63 2b 6a 1a a2 2c ae 3b b4 64 5e ab 4e 51 d8 9a 51 9f 25 21 d2 56 c8 34 a9 93 9b a2 3a b4 ee 47 96 63 83 9b d4 28 e8 55 11 d2 62 d2 d0 e3 1e 24 3c 91 92 b8 f0 68 d4 4f 1a Data Ascii: f;c(EksI#k }AEjY*[G$dk{O6vc,&"8>NM1s\V7^YJEx4/br8[TPCyh#:d22b@1>Xc+j,;d^NQQ%!V4:Gc(Ub$<hO
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 74 f8 dd ea 37 af 69 2c 69 bd 48 d4 2d 4d 6f e9 17 f2 36 90 b6 7f a2 72 a2 c7 2a 27 93 62 59 59 dc a1 cc 94 cc 3d 34 f2 bf c1 83 0c 22 e9 19 1a 71 d2 75 3f 4a 92 df 17 fa 1d c7 66 6a f2 63 d5 2d d2 d8 e9 f0 ca 7c 18 e1 18 c4 73 b5 51 36 7b 0a 56 2d 96 e4 b2 34 46 5a bf 45 a1 c8 6c 94 e8 96 51 f5 11 e0 96 53 b8 61 c7 2c ce 91 8b a5 86 2d f9 24 f4 a3 0c 7d b6 68 6f 83 4a 5c 99 ba 7c 39 b7 94 45 d1 f4 8b 98 9f e2 c2 ea 0b 61 c6 97 b1 1b a4 4e 3f 1c 89 a2 32 52 e0 e5 12 7b 51 8b 64 2d ca f4 d2 bc 92 99 29 b2 53 75 6c 9e 66 cd 46 a2 ce 8b 17 67 1f e5 fa 47 1c b3 3f c0 aa 08 79 52 f2 4f a8 4a 6a 35 c9 2c cb 93 4e a9 36 ca 50 dd ed 64 a7 a2 37 f0 61 93 f2 f9 26 d1 26 b1 b5 1f 2c 9c fb 74 a8 6f da a8 82 72 76 c4 f7 bb 1b a2 2f 6d 84 59 27 44 b3 26 ea ce b3 3c 5c Data Ascii: t7i,iH-Mo6r*'bYY=4"qu?Jfjc-\|sQ6{V-4FZElQSa,-$}hoJ\\|9EaN?2R{Qd-)SulfFgG?yROJj5,N6Pd7a&&,torv/mY'D&<\
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 4f ea 31 77 db 56 74 39 32 66 86 a9 12 6c 52 a3 2c 53 76 62 e4 d1 a5 95 63 e2 91 04 4b 7f 4a 1e c3 8d 90 69 6d c8 a9 3b 13 4f c1 2d a2 7b a8 c3 1a 89 9b dd 2b 22 9d 9a 54 56 e8 ee 38 ef 22 5a 73 46 e2 c5 89 99 f1 3c 8e db 27 0e 9f 14 69 ee 74 7d 5e b9 69 5c 10 76 5d f9 31 49 dd 9e d8 70 37 c3 47 81 7e 7d 1a 6d fa 24 c6 89 d7 09 59 87 1d 91 69 cb 4c 49 46 30 56 6a 73 89 0f 3a 48 2a 46 7c 7b d9 ee 51 a4 8d 72 4e 99 f5 08 39 62 72 8f 83 e9 b9 dc 72 38 4f c9 93 1d 70 67 f6 c9 48 58 f0 e5 6d e4 7c 0f ab c5 82 3f b3 03 0c fb 98 d4 90 c8 d7 04 61 b6 e7 83 fa f5 91 4f d1 ad 44 96 98 fb 44 e4 e3 54 2d 4f 83 45 aa 64 52 44 da 89 d4 cd f6 ad 3d bc 9d 0c a3 2b 87 fc 8e 97 23 9d e3 9f 25 53 71 12 4d 51 2e e7 4b 37 5e 09 f5 f8 21 0d 3e 48 4f fc 98 b8 d1 8f a6 d5 bd 11 Data Ascii: O1wVt92flR,SvbcKJim;O-{+"TV8"ZsF<'it}^i\v]1Ip7G~}m$YiLIF0Vjs:H*F\|{QrN9brr8OpgHXm\|?aODDT-OEdRD=+#%SqMQ.K7^!>HO
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: c3 fa ad a5 ae 25 e2 a7 e6 d1 00 78 1e 75 13 ed 4b fe 5b 83 86 8a 01 2e 95 9f 63 96 9d cc fa a9 82 3d 77 79 9d 14 84 4f 96 e7 35 de 18 59 ff 00 da 95 cd 92 ac da 0f fd 3b ff 00 88 0b 6e 94 c3 49 97 39 8d e1 cd 4c 87 32 79 71 df 44 d6 d4 a8 e7 06 0b 5a 09 d0 6f 7d 61 4c d8 c8 b8 fa fb 39 58 c3 1a db 42 86 1f cc 3e 15 cc 41 77 74 45 c4 93 93 25 73 1c f6 53 70 4f 7f 18 b4 38 26 bd 95 51 24 1c 20 44 dd 38 43 89 aa 2d 2b 19 08 59 27 a1 0b 2a 16 9b c3 69 b1 ce 24 c6 02 e2 bc b4 1e 21 a6 59 ef 34 f9 ab 18 d9 fc 56 cc 78 64 80 48 78 d4 7d 3e aa fa d3 f9 d4 38 75 db 32 5a ef fd 80 77 49 f6 39 e2 7c b7 63 5f 34 e7 7b eb 50 f2 0e 90 83 c5 36 b7 08 1e a1 73 23 6e 9d 91 81 32 ba 2d 65 65 b2 54 e4 2b 98 32 35 0b 20 85 e1 77 c9 00 c0 1b 73 49 69 71 8b a1 50 73 65 e1 ec Data Ascii: %xuK[.c=wyO5Y;nI9L2yqDZo}aL9XB>AwtE%sSpO8&Q$ D8C-+Y'*i$!Y4VxdHx}>8u2ZwI9\|c_4{P6s#n2-eeT+25 wsIiqPse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49826	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:57 UTC	346	OUT	GET /js/lazyload.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:57 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:57 UTC	902	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 32 74 4b 51 37 6c 71 2f 6e 31 7a 68 2b 66 56 41 6f 6f 73 70 79 4b 63 66 65 4e 58 74 72 6a 2f 5a 5a 4e 57 45 6f 57 57 56 51 33 49 64 65 64 42 6f 5a 6f 71 64 41 70 59 63 4f 6b 38 63 58 36 6a 57 37 65 57 36 75 77 4d 46 4c 76 35 57 62 71 62 48 72 4f 72 61 77 58 62 39 78 44 41 64 4d 78 37 71 48 54 73 74 49 56 36 61 63 43 45 3d 24 64 38 78 49 2f 46 6d 71 46 62 59 56 43 50 35 58 6c 55 6a 4c 6d 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 2tKQ7lq/n1zh+fVAoospyKcfeNXtrj/ZZNWEoWWVQ3IdedBoZoqdApYcOk8cX6jW7eW6uwMFLv5WbqbHrOrawXb9xDAdMx7qHTstIV6acCE=$d8xI/FmqFbYVCP5XlUjLmw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 32 32 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2208<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 50 71 74 4d 36 4a 41 4c 49 35 34 56 47 51 6f 34 45 31 7a 44 30 4e 6e 70 49 78 58 70 4c 36 6f 48 62 4d 52 47 5f 70 58 57 47 37 38 63 61 38 62 41 43 30 79 69 44 38 73 61 53 66 6b 76 46 72 41 79 38 72 4e 41 48 74 59 53 55 62 74 33 74 64 71 34 66 72 44 68 79 6d 5f 6a 44 37 58 4b 42 6d 4d 39 47 6b 5a 64 59 69 61 44 44 36 68 4b 79 33 42 5f 2e 33 44 57 41 56 49 33 6c 56 51 61 77 51 69 33 4b 48 72 39 6a 34 46 65 4a 44 73 49 57 39 4a 46 66 4d 31 56 6d 37 66 53 36 70 2e 41 42 47 39 7a 66 56 61 6b 42 4c 73 30 74 55 64 57 63 32 73 68 4b 4a 74 52 76 70 5a 31 50 7a 37 35 79 38 43 55 63 76 32 30 73 61 53 36 41 6c 59 4f 75 39 5f 34 33 76 63 56 46 48 75 66 54 58 38 48 41 4e 6b 57 37 62 41 52 45 38 4f 33 48 49 68 4e 37 6e 32 52 55 41 52 64 61 4e 56 73 48 5a 76 59 64 4a 67 Data Ascii: PqtM6JALI54VGQo4E1zD0NnpIxXpL6oHbMRG_pXWG78ca8bAC0yiD8saSfkvFrAy8rNAHtYSUbt3tdq4frDhym_jD7XKBmM9GkZdYiaDD6hKy3B_.3DWAVI3lVQawQi3KHr9j4FeJDsIW9JFfM1Vm7fS6p.ABG9zfVakBLs0tUdWc2shKJtRvpZ1Pz75y8CUcv20saS6AlYOu9_43vcVFHufTX8HANkW7bARE8O3HIhN7n2RUARdaNVsHZvYdJg
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 55 35 74 67 75 79 55 55 6d 65 31 43 47 5f 6f 52 34 44 78 50 74 65 44 5a 31 30 45 37 37 6c 54 47 57 61 79 58 44 41 4d 4a 55 54 62 6d 74 6c 30 74 6b 74 4c 46 4f 56 39 43 5a 68 4b 4c 4e 39 2e 65 69 69 57 68 50 66 56 4c 4e 66 7a 57 54 52 4c 56 43 73 4b 46 5f 6a 4f 76 47 50 5a 41 78 66 76 63 59 33 51 61 78 47 43 36 31 6a 34 74 6c 56 45 77 74 68 6e 4a 43 79 73 4a 78 41 5a 48 70 4b 53 65 71 58 74 54 53 33 52 38 69 4e 6c 6d 38 54 41 54 41 6e 35 43 61 61 56 59 6a 6a 6a 53 5f 5f 63 7a 69 79 65 31 33 5a 31 72 59 34 46 6f 5a 30 48 78 6f 43 71 53 6c 70 72 59 66 76 39 68 62 37 35 64 4e 61 4c 4f 48 36 30 4c 64 52 59 67 38 7a 31 30 38 77 72 62 46 57 61 6d 6f 66 4c 4a 44 39 76 67 54 42 65 64 72 31 2e 78 78 79 6a 78 59 63 44 6f 4c 45 36 4f 68 4b 39 33 6f 4a 6d 71 30 61 58 Data Ascii: U5tguyUUme1CG_oR4DxPteDZ10E77lTGWayXDAMJUTbmtl0tktLFOV9CZhKLN9.eiiWhPfVLNfzWTRLVCsKF_jOvGPZAxfvcY3QaxGC61j4tlVEwthnJCysJxAZHpKSeqXtTS3R8iNlm8TATAn5CaaVYjjjS__cziye13Z1rY4FoZ0HxoCqSlprYfv9hb75dNaLOH60LdRYg8z108wrbFWamofLJD9vgTBedr1.xxyjxYcDoLE6OhK93oJmq0aX
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 79 6d 53 39 4d 45 43 47 34 6e 50 4c 66 50 30 68 72 44 48 64 58 30 76 7a 50 6e 38 33 4c 76 4d 7a 57 2e 31 72 49 64 4c 43 39 36 72 72 43 2e 5f 65 4c 53 5a 6d 48 74 32 33 57 4c 77 35 76 33 4a 6c 6d 64 76 72 5f 41 4b 64 69 51 59 50 32 43 37 33 75 34 38 5a 41 63 2e 65 38 79 47 42 6a 79 66 6d 72 66 2e 48 7a 66 45 61 70 75 69 7a 7a 66 37 64 67 33 50 69 71 62 7a 69 4f 6a 30 72 2e 4a 57 48 30 74 54 4c 45 77 33 72 35 62 49 6d 45 76 49 33 65 76 4a 30 63 58 39 41 47 72 53 39 31 49 6c 4f 68 66 55 48 5f 67 54 6c 46 34 65 34 65 4c 4f 4c 2e 5a 2e 61 30 76 66 53 33 73 7a 39 38 51 31 59 66 48 6d 30 77 6a 62 4f 66 6e 55 38 4c 76 75 33 58 69 6a 34 4b 53 6e 6e 43 76 69 68 4d 53 79 49 32 71 57 61 41 47 41 57 6a 36 6a 73 2e 6f 65 4f 57 59 56 55 57 38 5a 30 6f 36 38 2e 55 78 35 Data Ascii: ymS9MECG4nPLfP0hrDHdX0vzPn83LvMzW.1rIdLC96rrC._eLSZmHt23WLw5v3Jlmdvr_AKdiQYP2C73u48ZAc.e8yGBjyfmrf.HzfEapuizzf7dg3PiqbziOj0r.JWH0tTLEw3r5bImEvI3evJ0cX9AGrS91IlOhfUH_gTlF4e4eLOL.Z.a0vfS3sz98Q1YfHm0wjbOfnU8Lvu3Xij4KSnnCvihMSyI2qWaAGAWj6js.oeOWYVUW8Z0o68.Ux5
2024-12-17 10:51:57 UTC	1369	IN	Data Raw: 58 57 44 67 64 72 78 78 64 54 44 6a 6e 41 51 62 51 78 70 56 48 75 31 56 72 34 63 71 58 6c 4f 4d 71 73 2e 56 64 5a 72 5f 5a 39 39 61 4a 44 39 41 43 32 75 58 6d 4d 6e 46 36 43 49 47 34 46 65 6d 4f 44 35 57 59 38 43 54 5a 6a 72 6b 6b 69 36 79 73 64 75 56 61 4d 49 7a 70 6b 57 6f 68 36 58 37 39 71 72 57 33 6d 74 49 66 32 2e 77 6c 4f 6c 78 66 4b 50 39 65 56 59 66 41 32 4d 2e 6d 4c 52 64 7a 48 77 37 4d 63 68 45 66 70 76 72 5f 63 50 4b 73 49 66 53 79 76 49 35 48 65 4e 78 4e 6f 62 2e 2e 77 45 63 4e 2e 66 77 49 65 73 39 37 64 64 4a 5a 36 33 32 49 77 4c 4c 39 4c 61 52 30 46 46 42 64 34 39 69 5f 79 2e 56 76 32 76 4d 50 58 43 45 55 38 66 6a 51 73 70 67 35 33 6b 51 31 4a 58 72 36 32 39 70 56 4a 65 37 56 54 47 4a 66 38 67 49 33 75 6e 6d 6d 6c 57 59 39 46 4e 2e 7a 55 73 Data Ascii: XWDgdrxxdTDjnAQbQxpVHu1Vr4cqXlOMqs.VdZr_Z99aJD9AC2uXmMnF6CIG4FemOD5WY8CTZjrkki6ysduVaMIzpkWoh6X79qrW3mtIf2.wlOlxfKP9eVYfA2M.mLRdzHw7MchEfpvr_cPKsIfSyvI5HeNxNob..wEcN.fwIes97ddJZ632IwLL9LaR0FFBd49i_y.Vv2vMPXCEU8fjQspg53kQ1JXr629pVJe7VTGJf8gI3unmmlWY9FN.zUs
2024-12-17 10:51:57 UTC	506	IN	Data Raw: 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 6c 61 7a 79 6c 6f 61 64 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 51 42 30 4b 4d 43 79 38 5a 46 6b 4c 69 42 79 68 4e 5f 52 2e 59 72 72 56 4d 53 4e 4c 35 59 37 49 64 70 5f 6a 6d 7a 31 7a 52 Data Ascii: earch;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/lazyload.js?__cf_chl_rt_tk=QB0KMCy8ZFkLiByhN_R.YrrVMSNL5Y7Idp_jmz1zR
2024-12-17 10:51:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49828	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:57 UTC	348	OUT	GET /js/slider_v04.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:58 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:58 UTC	898	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 76 79 73 41 2f 7a 41 2b 43 47 4b 55 4b 4d 42 55 4a 59 59 4d 6a 72 54 4d 46 50 34 55 4c 50 38 65 6e 63 2b 67 76 64 33 4b 71 4c 34 4d 73 44 43 78 63 39 39 78 55 63 6d 39 35 55 42 41 42 48 36 6e 39 76 67 4a 6c 50 66 62 78 75 64 54 4e 32 65 6f 71 4d 61 4e 63 69 57 6c 61 66 69 47 54 6b 58 2b 39 66 57 39 56 2f 78 43 57 57 38 3d 24 69 58 70 76 59 74 63 6a 74 4d 6c 74 75 4c 52 47 65 70 2b 4f 69 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: vysA/zA+CGKUKMBUJYYMjrTMFP4ULP8enc+gvd3KqL4MsDCxc99xUcm95UBABH6n9vgJlPfbxudTN2eoqMaNciWlafiGTkX+9fW9V/xCWW8=$iXpvYtcjtMltuLRGep+Oig==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 32 32 30 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 220e<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 36 62 74 4c 53 47 4c 4c 43 7a 4c 6e 63 59 69 43 44 76 32 5f 73 55 37 66 5f 41 49 78 61 4a 6a 53 54 65 78 64 61 4f 77 73 6a 73 35 70 58 57 48 77 76 6a 6f 67 4a 2e 5f 64 58 79 5a 44 4f 71 7a 78 4e 37 77 57 37 47 45 75 32 51 4b 41 30 47 66 33 6a 4b 62 50 63 54 35 77 38 33 78 6d 38 45 4a 55 38 74 44 42 74 46 2e 4f 2e 43 71 68 43 4c 71 77 56 6d 70 53 50 57 70 64 66 5f 5f 36 46 68 63 42 5f 50 32 34 4b 79 30 7a 4f 31 70 34 4d 44 7a 33 48 44 52 73 69 65 4d 65 6f 39 41 66 30 6f 33 59 52 34 51 4f 73 48 44 51 54 31 47 34 55 37 6e 4a 72 52 42 71 6d 74 39 46 4e 76 61 4c 54 30 57 56 78 50 5a 65 44 4f 46 78 4a 31 35 4f 42 79 53 4b 64 4c 6d 67 71 6c 2e 4f 66 50 77 50 42 70 37 30 2e 43 2e 48 5a 45 48 50 6d 4e 70 78 6d 77 45 71 69 73 7a 78 71 71 61 6a 45 50 6d 48 59 42 51 Data Ascii: 6btLSGLLCzLncYiCDv2_sU7f_AIxaJjSTexdaOwsjs5pXWHwvjogJ._dXyZDOqzxN7wW7GEu2QKA0Gf3jKbPcT5w83xm8EJU8tDBtF.O.CqhCLqwVmpSPWpdf__6FhcB_P24Ky0zO1p4MDz3HDRsieMeo9Af0o3YR4QOsHDQT1G4U7nJrRBqmt9FNvaLT0WVxPZeDOFxJ15OBySKdLmgql.OfPwPBp70.C.HZEHPmNpxmwEqiszxqqajEPmHYBQ
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 34 64 57 32 57 56 79 78 62 79 74 38 6c 44 38 45 5a 52 39 39 74 5f 77 6e 64 4a 6a 76 78 6f 43 37 49 71 71 58 62 6c 54 4c 4f 46 5f 6e 43 32 58 32 70 4e 77 79 48 74 36 45 55 46 51 79 6d 38 72 30 48 47 63 54 5f 45 6a 71 53 58 6d 32 58 44 54 34 51 52 79 66 73 47 65 68 72 69 67 68 78 44 66 51 46 4e 52 6d 6b 4c 38 50 63 31 68 6e 39 44 58 77 75 56 51 72 46 59 46 36 7a 63 71 43 5a 43 79 4c 4b 76 33 6d 58 71 52 5a 33 6c 74 2e 69 63 59 71 51 58 58 62 68 79 71 74 62 4f 5a 46 73 63 64 64 38 54 6f 4d 61 4c 69 6e 45 72 43 6f 74 78 71 51 78 6c 4a 43 68 37 42 7a 32 33 4d 6a 56 49 44 6d 42 32 68 42 4f 77 31 6c 4e 46 69 33 33 5f 6e 77 45 63 72 45 45 74 58 4d 2e 39 63 4a 4e 37 46 41 2e 45 52 51 78 36 50 5f 54 6f 74 43 7a 48 6c 37 6a 5f 46 59 4a 53 36 50 35 65 71 61 4f 2e 30 Data Ascii: 4dW2WVyxbyt8lD8EZR99t_wndJjvxoC7IqqXblTLOF_nC2X2pNwyHt6EUFQym8r0HGcT_EjqSXm2XDT4QRyfsGehrighxDfQFNRmkL8Pc1hn9DXwuVQrFYF6zcqCZCyLKv3mXqRZ3lt.icYqQXXbhyqtbOZFscdd8ToMaLinErCotxqQxlJCh7Bz23MjVIDmB2hBOw1lNFi33_nwEcrEEtXM.9cJN7FA.ERQx6P_TotCzHl7j_FYJS6P5eqaO.0
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 55 43 66 77 4f 32 76 31 36 76 4f 79 45 49 35 4b 6f 72 72 51 39 66 64 45 41 65 4c 56 51 4e 58 73 32 61 48 31 64 51 43 61 33 48 79 64 61 61 42 4b 6a 67 57 73 35 63 6a 4d 71 6d 7a 43 78 47 2e 68 34 59 74 35 32 6a 53 48 30 54 2e 35 38 42 78 74 52 46 51 71 6c 56 6c 75 78 4b 4e 49 32 73 5f 66 5a 31 46 45 49 78 65 44 4e 34 71 33 76 72 4b 67 76 46 76 6b 70 5f 66 47 50 7a 56 50 47 2e 67 54 6d 6c 7a 77 36 71 57 58 46 4d 75 4e 6f 57 54 54 48 45 41 75 4c 62 47 76 53 2e 76 58 77 54 6f 6d 42 65 69 38 64 45 49 5f 66 48 52 4f 54 4f 77 61 6e 7a 63 41 57 65 39 4b 64 73 63 44 49 56 38 58 72 79 39 53 4a 6e 4f 69 31 54 50 6f 66 64 6f 52 33 76 30 38 74 4e 68 51 45 37 6a 6c 44 42 79 51 2e 58 35 48 36 57 50 72 6f 39 4d 48 36 6d 6a 2e 7a 56 39 38 79 53 4f 41 39 71 6e 77 74 30 73 Data Ascii: UCfwO2v16vOyEI5KorrQ9fdEAeLVQNXs2aH1dQCa3HydaaBKjgWs5cjMqmzCxG.h4Yt52jSH0T.58BxtRFQqlVluxKNI2s_fZ1FEIxeDN4q3vrKgvFvkp_fGPzVPG.gTmlzw6qWXFMuNoWTTHEAuLbGvS.vXwTomBei8dEI_fHROTOwanzcAWe9KdscDIV8Xry9SJnOi1TPofdoR3v08tNhQE7jlDByQ.X5H6WPro9MH6mj.zV98ySOA9qnwt0s
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 4d 7a 44 58 35 33 36 54 32 62 35 47 35 2e 33 69 5f 53 6e 50 32 68 31 79 73 72 77 5f 2e 47 36 51 69 6e 47 39 51 39 62 35 46 59 48 55 6d 71 44 4c 66 6e 67 4d 71 6a 71 4b 6d 39 75 6f 56 61 70 79 65 51 38 78 2e 36 66 49 70 54 57 49 5a 51 46 77 55 63 72 4b 49 4b 58 70 4d 4d 49 6a 79 74 4b 55 6c 68 6e 37 4b 71 66 47 48 6a 37 63 70 2e 38 4f 6f 61 72 6f 78 4c 75 67 75 61 65 65 37 6f 44 34 79 75 6a 35 59 7a 2e 6d 34 6c 32 34 4a 5a 66 5f 51 36 56 68 69 39 37 49 54 41 71 44 68 5f 2e 64 4e 43 57 5f 79 42 73 45 6f 34 65 6f 6a 63 68 33 52 76 74 76 45 4e 6a 4f 73 5f 61 46 4a 51 52 6f 52 68 45 48 44 67 52 36 34 59 51 70 7a 76 63 6c 2e 77 59 6c 41 66 6a 59 68 30 55 56 59 31 78 79 44 56 6e 43 2e 37 57 78 52 68 4a 57 5f 71 6e 4c 44 6a 49 59 76 7a 39 73 66 57 72 57 49 48 66 Data Ascii: MzDX536T2b5G5.3i_SnP2h1ysrw_.G6QinG9Q9b5FYHUmqDLfngMqjqKm9uoVapyeQ8x.6fIpTWIZQFwUcrKIKXpMMIjytKUlhn7KqfGHj7cp.8OoaroxLuguaee7oD4yuj5Yz.m4l24JZf_Q6Vhi97ITAqDh_.dNCW_yBsEo4eojch3RvtvENjOs_aFJQRoRhEHDgR64YQpzvcl.wYlAfjYh0UVY1xyDVnC.7WxRhJW_qnLDjIYvz9sfWrWIHf
2024-12-17 10:51:58 UTC	512	IN	Data Raw: 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 73 6c 69 64 65 72 5f 76 30 34 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 69 6d 2e 4e 4e 51 77 61 55 39 4b 65 70 71 72 53 6b 6b 50 65 76 58 75 67 2e 74 49 73 69 55 4c 72 71 6f 72 Data Ascii: on.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/slider_v04.js?__cf_chl_rt_tk=im.NNQwaU9KepqrSkkPevXug.tIsiULrqor
2024-12-17 10:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49827	192.243.59.12	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:57 UTC	563	OUT	GET /92/7e/05/927e05d1dfb77a114f82a8dfe3ac3790.js HTTP/1.1 Host: repetitiousfontmonopoly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:58 UTC	575	IN	HTTP/1.1 403 Forbidden Server: nginx/1.19.5 Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Host: repetitiousfontmonopoly.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49831	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:57 UTC	1516	OUT	GET /watching/passengers__ZJXEAGel2Y__movie/ HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:58 UTC	854	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.1 Location: https://gomo.to/movie/passengers cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tKXc9%2BWbNjBfB3%2BiC4oyc9fvf9PnB1bNOzoZBLo0THmzJX0Kn6pHwsH3nmRY7506RaAJrYpG74wMbKwbkMCPCm0s1%2B5oeHRF2n4pd7xEpOo63CQrdiIqebeUdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c6889c54382-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&min_rtt=1671&rtt_var=646&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=2116&delivery_rate=1668571&cwnd=248&unsent_bytes=0&cid=71f33913e5d00901&ts=965&x=0"
2024-12-17 10:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49830	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:57 UTC	354	OUT	GET /js/movies.min.js?v=1.6 HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:58 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:58 UTC	902	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 30 34 4c 66 6d 31 77 68 5a 70 68 46 76 64 2b 2b 46 51 5a 42 67 2b 62 34 45 6e 2f 39 35 41 54 48 6c 4b 75 57 6b 69 74 77 46 64 34 2f 4c 6b 32 4d 61 74 7a 7a 2f 44 30 2b 36 39 6f 58 58 64 72 6e 30 65 51 30 33 71 45 52 5a 79 50 6c 51 4a 37 50 46 7a 33 63 6e 49 37 66 49 52 32 54 63 72 66 6a 42 6a 30 56 49 6f 75 4b 6b 33 51 3d 24 48 31 57 39 69 43 58 73 34 56 59 34 66 6a 66 47 4d 59 71 39 38 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 04Lfm1whZphFvd++FQZBg+b4En/95ATHlKuWkitwFd4/Lk2Matzz/D0+69oXXdrn0eQ03qERZyPlQJ7PFz3cnI7fIR2TcrfjBj0VIouKk3Q=$H1W9iCXs4VY4fjfGMYq98w==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 32 32 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2220<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 4d 6d 6b 77 6e 59 76 36 38 34 34 54 2e 54 55 39 55 72 45 7a 6e 5f 7a 70 71 6b 45 5f 54 76 64 53 68 4f 30 42 4e 39 75 46 68 5f 39 30 4b 55 57 48 34 47 75 65 51 43 36 51 6b 77 6e 43 45 71 4d 2e 77 39 76 6a 38 57 61 73 6f 79 5f 5f 42 79 62 69 46 45 4f 47 75 6c 79 4f 70 43 50 44 57 72 4b 73 73 66 6a 66 4c 69 31 46 35 53 45 2e 31 4e 31 47 56 77 63 55 76 67 69 6c 4d 72 36 56 65 64 6e 45 42 6f 44 6d 69 74 52 53 74 72 6f 51 32 35 4d 37 55 77 32 59 31 35 6b 70 44 46 49 54 39 38 50 37 51 64 61 61 44 59 51 49 69 38 2e 76 75 65 2e 46 6a 35 6f 34 4f 57 39 6c 33 63 75 4f 65 58 74 59 37 79 57 79 70 59 44 69 30 55 6f 67 2e 36 39 71 36 6d 5f 71 57 74 67 73 42 6d 59 32 48 39 51 78 31 77 75 63 74 4a 44 72 65 6e 6a 30 66 44 32 2e 67 55 44 52 6c 4e 74 44 58 55 61 32 6c 30 79 Data Ascii: MmkwnYv6844T.TU9UrEzn_zpqkE_TvdShO0BN9uFh_90KUWH4GueQC6QkwnCEqM.w9vj8Wasoy__BybiFEOGulyOpCPDWrKssfjfLi1F5SE.1N1GVwcUvgilMr6VednEBoDmitRStroQ25M7Uw2Y15kpDFIT98P7QdaaDYQIi8.vue.Fj5o4OW9l3cuOeXtY7yWypYDi0Uog.69q6m_qWtgsBmY2H9Qx1wuctJDrenj0fD2.gUDRlNtDXUa2l0y
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 67 41 50 34 49 47 67 33 38 67 49 2e 61 68 69 37 6b 34 75 39 6f 79 6e 33 58 71 67 61 5f 30 46 48 69 31 4a 67 6e 7a 4a 4a 79 37 41 6f 4a 77 43 4e 66 6b 43 38 4b 37 42 6c 61 5a 51 49 36 72 66 77 41 54 48 54 2e 30 4e 69 4a 2e 4e 42 48 6c 4e 69 65 50 55 73 59 4a 59 45 6f 67 6e 63 56 6d 72 68 74 48 33 78 47 52 6c 4a 5f 5f 39 45 49 6a 42 5f 35 39 4a 68 59 42 79 2e 35 4e 6e 53 64 5a 6a 5f 4d 59 56 59 47 4e 51 49 74 46 38 42 59 57 6a 4f 59 32 6c 51 46 6c 75 47 35 49 51 54 76 38 51 6d 50 58 4a 65 46 79 79 49 72 32 79 4a 74 54 57 75 43 35 58 42 71 58 77 67 45 6c 75 4a 52 57 78 33 46 5f 32 79 63 65 75 50 49 6e 6d 67 74 4e 7a 51 55 61 75 61 66 6b 4b 37 7a 36 59 49 36 49 46 68 56 4c 4c 51 73 39 53 45 6b 52 64 53 67 38 6a 6d 35 36 33 4b 55 64 44 46 73 6e 34 43 6a 6a 63 Data Ascii: gAP4IGg38gI.ahi7k4u9oyn3Xqga_0FHi1JgnzJJy7AoJwCNfkC8K7BlaZQI6rfwATHT.0NiJ.NBHlNiePUsYJYEogncVmrhtH3xGRlJ__9EIjB_59JhYBy.5NnSdZj_MYVYGNQItF8BYWjOY2lQFluG5IQTv8QmPXJeFyyIr2yJtTWuC5XBqXwgEluJRWx3F_2yceuPInmgtNzQUauafkK7z6YI6IFhVLLQs9SEkRdSg8jm563KUdDFsn4Cjjc
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 67 37 45 49 39 70 38 39 6e 62 50 49 76 30 58 6a 48 49 75 34 70 6c 48 64 67 38 5f 52 79 39 6b 41 39 33 39 6e 6a 72 76 62 41 65 42 4e 46 50 4d 65 6c 6a 73 74 76 63 6b 68 33 31 4c 7a 71 69 68 38 42 39 5f 7a 63 53 56 74 72 47 31 6e 71 6c 65 31 6a 6a 73 4b 32 59 45 6f 41 75 77 66 55 4b 36 44 34 5f 45 73 39 56 50 71 45 74 69 67 31 48 42 5f 75 37 70 6a 71 71 6d 6e 69 59 7a 72 48 49 66 73 4e 41 31 75 2e 30 6b 67 4a 50 79 42 70 59 54 72 42 62 77 62 76 6f 57 50 6e 4d 73 5a 47 71 72 43 54 38 35 68 6d 78 64 63 36 32 66 61 62 43 5a 65 4d 49 46 7a 77 73 41 2e 53 42 36 32 76 37 32 65 5f 78 73 65 4c 32 7a 52 54 70 33 69 4f 31 50 58 61 77 6a 63 38 6e 76 46 41 56 37 4a 48 53 35 6e 68 58 50 58 72 67 79 66 4f 34 62 73 51 64 32 78 6e 5a 4c 50 7a 72 6a 59 4b 7a 4a 7a 52 36 59 Data Ascii: g7EI9p89nbPIv0XjHIu4plHdg8_Ry9kA939njrvbAeBNFPMeljstvckh31Lzqih8B9_zcSVtrG1nqle1jjsK2YEoAuwfUK6D4_Es9VPqEtig1HB_u7pjqqmniYzrHIfsNA1u.0kgJPyBpYTrBbwbvoWPnMsZGqrCT85hmxdc62fabCZeMIFzwsA.SB62v72e_xseL2zRTp3iO1PXawjc8nvFAV7JHS5nhXPXrgyfO4bsQd2xnZLPzrjYKzJzR6Y
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 7a 58 58 39 70 57 35 75 5a 33 68 32 5a 51 44 42 4b 31 61 35 57 48 66 59 34 67 2e 58 41 2e 6d 59 71 50 74 58 73 43 6f 45 49 65 44 6b 73 58 52 34 6e 36 51 77 58 4d 32 68 4f 4e 72 75 62 32 4f 77 65 61 57 6f 59 4b 55 64 54 35 6e 4c 58 67 71 34 61 4c 68 56 62 44 70 74 44 77 4d 50 6d 70 41 6b 4c 41 46 39 71 34 43 33 61 59 79 6a 6d 66 42 2e 6a 73 6b 61 75 33 6c 34 4b 5f 74 77 71 62 79 52 6f 34 30 50 5a 6c 33 68 32 67 36 76 55 5a 61 7a 4f 52 71 37 72 6e 62 72 74 58 2e 30 41 79 76 63 63 6f 44 36 2e 46 54 49 67 67 6c 5f 2e 4f 2e 58 6a 4c 58 53 36 78 5a 5a 4b 71 4f 79 75 65 4f 70 75 50 53 6e 67 74 43 67 45 35 35 72 6f 59 50 6c 49 4d 49 5f 55 53 4a 49 59 51 34 41 58 79 79 50 38 68 39 4f 6d 65 75 63 5f 32 76 68 37 63 45 4e 59 52 2e 64 43 76 35 35 72 30 57 63 4b 71 67 Data Ascii: zXX9pW5uZ3h2ZQDBK1a5WHfY4g.XA.mYqPtXsCoEIeDksXR4n6QwXM2hONrub2OweaWoYKUdT5nLXgq4aLhVbDptDwMPmpAkLAF9q4C3aYyjmfB.jskau3l4K_twqbyRo40PZl3h2g6vUZazORq7rnbrtX.0AyvccoD6.FTIggl_.O.XjLXS6xZZKqOyueOpuPSngtCgE55roYPlIMI_USJIYQ4AXyyP8h9Omeuc_2vh7cENYR.dCv55r0WcKqg
2024-12-17 10:51:58 UTC	530	IN	Data Raw: 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 6d 6f 76 69 65 73 2e 6d 69 6e 2e 6a 73 3f 76 3d 31 2e 36 26 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 55 56 4e 4f 48 38 54 35 46 50 69 37 6b 53 33 77 70 Data Ascii: '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/movies.min.js?v=1.6&__cf_chl_rt_tk=UVNOH8T5FPi7kS3wp
2024-12-17 10:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49833	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:58 UTC	1385	OUT	GET /images/logo-light.png HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/css/main.css?v=4.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:58 UTC	903	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: image/png Content-Length: 13037 Connection: close Last-Modified: Sat, 18 Jan 2020 07:35:09 GMT ETag: "32ed-59c651905e540" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5503 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b20H2yNIavZiitnqDxEbuRUa%2Bi9YhcoVzecuBNyn%2BjClk6gA9lFzsVUiFjNio%2BF4IPCdru60rRRE5zfKXAH%2BM0qPMbT3j4vq1Plp%2Fw%2FqdB67Z8gUsugoi7ZS%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c69cf3978e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2053&min_rtt=2047&rtt_var=780&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1963&delivery_rate=1392465&cwnd=234&unsent_bytes=0&cid=3af69b33e0453408&ts=449&x=0"
2024-12-17 10:51:58 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 34 10 06 00 00 00 2c fc 41 e0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e4 01 12 07 22 2c 16 54 79 d6 00 00 31 f1 49 44 41 54 78 da ed 9d 77 60 15 c5 de fe 3f b3 73 ce 49 0f 24 81 04 08 bd f7 1a 7a ef 45 10 94 aa 20 16 8a a2 88 05 51 29 1a 29 2a 4d 10 04 a5 a8 80 8a 52 a5 48 ef bd f7 de 21 09 2d 09 e9 fd 9c dd fd fe fe 20 7a f5 de eb 7b f5 96 f7 ea fb cb f3 07 27 ec 7e a7 ec 3c f3 ec cc 7c 77 0a fc 9b d1 27 f3 db 21 87 df 65 5a ff 3a eb cf c6 ef 98 de b2 af 73 73 70 f2 ab Data Ascii: PNGIHDRd4,AgAMAa cHRMz&u0`:pQ<bKGDXtIME",Ty1IDATxw`?sI$zE Q))*MRH!- z{'~<\|w'!eZ:ssp
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 54 af cb db 96 65 15 0f 38 d2 af f1 ee ef b3 b7 be 30 ae fe a5 83 a6 d8 bc f7 8f 42 3f fa d9 9a 02 97 e6 13 f6 74 f8 3a 77 5c 8d 86 0b 9e 2a bc a5 5a ca a8 68 57 df e9 bb 06 64 cd 3e 78 ac cf d0 1d 1b b2 ba 06 4c cb 2b e7 3c fc 27 f0 bf d0 c9 51 15 54 05 44 3d 71 a1 4c 7c 48 da 66 d9 62 b6 b0 0f e4 bc 55 e2 83 94 d8 94 37 02 c6 fc a3 d0 8d e6 39 ab 54 18 40 03 8e 65 cf cc 88 6e 5b 8f 15 19 6f a6 6e 2c 36 51 f5 cd 7a 3c eb 62 bd 50 75 d6 d3 3f e7 bd f2 b1 b9 2d 89 2b 8f d2 3c fc c9 04 f2 10 4b 4f 0c ab 53 fc 24 ef 30 52 8e 88 6b c3 29 67 25 1d ae 5b b5 fe fc a9 90 45 b1 62 d1 ed d7 c2 1d ba 95 f3 d4 e9 08 4e 58 6f 05 04 e7 9b 76 f0 92 6e 63 dc 51 5b ce 3e ed 98 6c 7a dc 25 a7 6c d6 c7 d2 56 a6 06 9f 5a 0b 4a 29 85 3b 8f d2 3c fc 29 05 f2 23 2e b6 0c 1d 6b Data Ascii: Te80B?t:w\*ZhWd>xL+<'QTD=qL\|HfbU79T@en[on,6Qz<bPu?-+<KOS$0Rk)g%[EbNXovncQ[>lz%lVZJ);<)#.k
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 0a 5d d2 ce 3e 64 24 49 99 d5 aa 68 9d 83 77 09 ff 2e e3 89 69 7b 17 d8 ad f6 2d 30 4b a7 cc 50 db 73 da 15 2a 77 bd 2d b7 28 f3 49 95 57 a6 a8 52 64 ff df a1 4c a2 24 0a 03 54 09 55 02 fb 37 d8 8b 08 46 ee 4c 03 fb ff 4e 39 fc ef e0 77 b8 79 a5 8c 68 00 76 c8 03 00 2e ca fb e0 53 d3 78 59 76 81 4e 91 de 56 18 58 a9 56 84 55 09 ac a6 76 33 eb 45 30 f7 d9 6f 59 9b c1 b5 5d 1d b1 97 43 8d e1 f9 6f 59 5d e0 f9 77 cb 04 5b a7 60 f2 d4 9a b6 f5 06 3c 77 b6 f4 f7 96 0d d5 72 f2 0f b5 a7 80 23 54 ad 95 44 e0 3c 15 e5 02 a8 b1 d2 59 fa 53 d8 6c 62 75 b5 6f 84 9c b5 33 3d 3e 56 c5 01 93 e5 15 73 a6 fd d5 b6 26 ec 51 af ca 9b d7 8a 39 3c 41 1d 25 f0 fb 4f 13 52 eb 15 95 e3 11 09 43 1f bb 5c 4d 72 a8 ff 67 27 aa d7 e1 8b 1d 45 e8 df 63 e9 a6 4f e3 d7 e4 ff d1 2b 98 Data Ascii: ]>d$Ihw.i{-0KPs*w-(IWRdL$TU7FLN9wyhv.SxYvNVXVUv3E0oY]CoY]w[`<wr#TD<YSlbuo3=>Vs&Q9<A%ORC\Mrg'EcO+
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: d1 01 54 84 ba a5 ce 83 71 d3 fe 52 25 80 aa ab aa db a7 c0 e8 66 f4 34 6a 80 4a 51 09 aa 0c a8 7b aa ad 02 ec 75 aa 88 6a 00 aa aa 2a a9 dc 60 b4 14 a5 0a 81 4a 54 45 54 7e 50 f5 55 31 55 1d d4 6d e5 52 69 a0 42 94 4b 15 03 23 5c 0d 52 4d c1 b9 59 a5 2b 37 38 c6 29 a7 7c 03 d6 64 7b 2e 87 01 68 f9 47 26 a2 f4 65 34 9a 22 97 36 49 13 b9 5b 34 52 ba d9 6f d8 93 bd ca fc c3 80 23 78 8e 48 bf 28 d2 08 e6 54 98 85 93 40 42 08 fb 3b 96 ea 8f fc fc 7f 5c 81 ac 15 5b 6e e3 2f ef d1 89 a3 c0 64 42 30 81 4c 82 b9 06 14 a1 1e 11 f8 83 0c 90 70 50 cd e5 10 27 40 12 70 71 06 cc 9b d6 21 2b 0c 12 5f 48 da 9c 54 0d 72 b6 f9 74 f0 e9 04 81 af 06 94 f3 2f 09 fa 09 e3 45 63 06 d8 03 8c a6 46 45 50 c5 55 3d 55 15 8c 0a 76 5f 7b 1a a8 67 8c b7 54 73 50 8d d5 39 a3 21 18 cd Data Ascii: TqR%f4jJQ{uj*`JTET~PU1UmRiBK#\RMY+78)\|d{.hG&e4"6I[4Ro#xH(T@B;\[n/dB0LpP'@pq!+_HTrt/EcFEPU=Uv_{gTsP9!
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: c0 58 bf 4b 7e 85 c1 25 ae 27 5d 75 41 05 da 4f a8 a7 c0 28 ab ca 19 c3 c1 7e ce e8 a7 ae 80 32 55 7d fb 69 30 da 18 6f aa c1 a0 7a ab eb 46 67 50 d5 ec 09 ea 22 30 5f fa 09 40 79 3e 21 05 80 3d ff 13 83 1d 1b 6f 68 2e 42 d5 a0 18 57 85 d4 8c 90 e4 7b ab 93 ee d8 b7 de 7b 40 ba 7c 66 4f eb df c5 1e 6c ef b3 87 07 d6 62 9b 3c 21 4d 99 42 1d 5c 08 b7 80 d3 28 2c 59 65 67 5a ed f1 61 a1 9a ab 36 3c ff a6 da a9 a6 19 39 29 e1 f1 27 e3 5b a5 54 5a 38 fc c9 05 3b 66 a6 c4 8d f7 8d 33 83 8a de 18 9a b0 72 db a0 5a cb 6a 2d 23 ea a7 0c 38 51 ff d4 30 5a fd 53 96 15 b8 42 b2 44 37 98 c3 02 69 65 1f ad 7d eb a7 3b 2b a4 a8 0e b7 36 d2 57 ed 53 37 bc 36 01 49 4c f9 97 75 e9 92 36 24 30 3e ff 31 fa 48 0b 7b 4b db 27 79 59 5a d9 5e ea 19 c0 c9 11 76 52 8a 65 14 bc 7f Data Ascii: XK~%']uAO(~2U}i0ozFgP"0_@y>!=oh.BW{{@\|fOlb<!MB\(,YegZa6<9)'[TZ8;f3rZj-#8Q0ZSBD7ie};+6WS76ILu6$0>1H{K'yYZ^vRe
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 77 63 9a 63 9c e3 85 b6 6f 4b 45 3b c4 3e 55 ea 63 26 db 73 e4 9d 92 6f 19 bb 1d b6 b3 7e bb 17 8d 6d 8e d5 ce 5d 2b e1 6d 25 46 0d 2b 06 1b 1b 1b 13 45 10 c1 14 90 b5 56 7f f3 ed 22 6f e2 c5 0d 1e fb a2 65 8f f7 ea 87 26 15 73 36 fb a3 08 84 8b 5c 62 3e 0e f5 14 8d d5 5d f9 ee bf 9d 1d a3 40 60 78 d9 6e 05 ce ca 13 f6 2e 6b f2 82 44 09 b2 96 59 55 7c 76 01 0a 85 81 89 89 49 16 e3 8d de c6 1a 77 69 e3 bc a3 88 ab c7 57 2e 92 f4 12 fd 52 eb 25 e2 12 c3 ae 51 da 9b 10 e5 ad 76 94 9b a4 ee 39 06 e9 4e 7d f6 ab 21 ba b1 a3 ec ee 2c be 31 7a 19 63 ed f7 d5 58 6d eb 91 0b 22 6d 65 57 b6 b2 9e 4e 5f 66 77 2a 56 70 7d 4e 61 07 4e 29 24 69 a0 3e a7 0d 67 41 e6 e3 64 1b f0 22 4e c2 01 54 03 1e 76 b1 66 d9 49 80 16 db 68 01 aa 17 05 b9 07 2a 83 f9 d2 1e 74 7e 5d 58 Data Ascii: wccoKE;>Uc&so~m]+m%F+EV"oe&s6\b>]@`xn.kDYU\|vIwiW.R%Qv9N}!,1zcXm"meWN_fwVp}NaN)$i>gAd"NTvfIht~]X
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 20 0b 64 0a 80 44 d3 1c 54 3d 0a c9 64 90 64 d5 9e bb a0 f6 11 ca 50 d0 31 c6 39 5d 15 54 65 7e 90 18 90 4c 51 02 88 92 ab 22 20 35 24 50 1c a0 0a cb 4d 01 24 e1 61 8b 22 09 72 5f d2 40 44 0a 4b 08 48 05 49 17 1b 24 4c b2 25 1d e4 90 14 94 50 90 4c b9 26 39 20 0d e4 9e 28 30 22 24 53 92 40 a2 25 44 0c b0 d3 45 c4 1b e4 bc dc 94 6b 40 79 19 9f eb 9e 5c 68 ef fd f9 23 6b cb 91 5e 62 0e d8 fd cd ef fd 3f c5 0d d4 e6 12 f7 c8 00 0e b1 0e 3f fa ec 9b c1 3a 67 85 f0 57 d3 3e 07 0e 02 bd fe 59 c2 77 0e b8 7e ce 8a 4c f6 09 fa 30 ff 32 b9 74 30 c6 d9 42 da 5b 2d bb dc f6 b9 ec 38 ab ea 52 cc 67 a1 2b d5 61 79 b7 96 2e 6a b2 7a b1 e4 aa a0 dd ce 02 32 1c 1c e7 54 63 fa 80 03 b5 95 ee 60 84 2b 2f 7c 41 cd 50 9f 50 e4 2f f1 ab a4 87 eb 3c 19 90 4b 72 a1 87 1d 63 36 Data Ascii: dDT=ddP19]Te~LQ" 5$PM$a"r_@DKHI$L%PL&9 (0"$S@%DEk@y\h#k^b??:gW>Yw~L02t0B[-8Rg+ay.jz2Tc`+/\|APP/<Krc6
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 90 c8 5f 67 39 fd c7 de d8 c3 9f b8 22 46 37 b6 72 a3 60 ba 54 ba 3c 10 38 4c 74 e3 83 40 71 8a d3 10 ec e3 e6 97 c6 66 70 94 f1 ea f5 88 0d 25 2b 24 3d 7a f1 09 60 0a b0 f8 f7 67 c8 dd 4a 94 0a 24 d6 79 4f de ec d2 06 58 4d 1b 9a 00 3f ca 3c 80 86 2c 05 63 a0 c3 ef d2 04 48 2b 56 fa 1b 56 72 cd af 83 f9 ed c5 1d 40 5f 95 69 55 04 90 c8 87 6f 12 42 89 04 3b c1 0a eb 34 03 0a 06 fa cf 1b 35 2e 37 ad 7f 7b 71 1a d4 93 fc f6 41 60 9f d4 94 ab c0 23 a2 64 2b 80 14 91 dd 00 52 4d 62 00 98 22 bb 01 97 14 96 13 a0 de 10 2f 39 01 aa 8c 7c 22 bd 41 37 d5 37 f5 0a d0 21 3a 46 2f 02 ad f4 01 bd 0a 74 15 9d a5 bf 07 5d 40 9f d3 db 40 87 1b bb f4 45 d0 f1 c6 09 bd 17 74 01 23 41 5f 04 5d dc b8 a1 f7 81 2e 6e 5c d0 a7 41 3b 75 a6 de 0f da 61 ec d5 7b 40 6b bd 5f ef 04 Data Ascii: _g9"F7r`T<8Lt@qfp%+$=z`gJ$yOXM?<,cH+VVr@_iUoB;45.7{qA`#d+RMb"/9\|"A77!:F/t]@@Et#A_].n\A;ua{@k_
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 2f f7 9c 9a b4 2a 06 d9 aa ad 3a 7f 7d 25 af 4a 25 39 c8 76 0a e3 2f 37 68 88 53 7d 6f ac ca 68 47 79 4e d0 39 ed 18 5a aa 4a 36 29 aa 93 74 92 43 c0 25 0a ca 21 50 33 64 85 b4 02 9d 4f 6f d5 fb 40 9b fa 8e 3e 01 da 4b 1f d7 7b 40 17 d5 f7 f4 79 d0 75 f4 39 e3 38 e8 3a 3a 51 ef 01 9d 5f 1f 34 f6 80 2e af e3 f4 79 d0 c5 75 bc 3e 0f 8e ce fa b0 3e 01 8e 96 3a c1 58 0b 8e 1a fa ba b1 1f 74 63 7d 2d b7 65 39 67 ec 01 5d 5a 5f d4 e7 41 d7 d0 f7 8c e3 a0 33 f5 36 bd 07 d2 a7 d8 b5 1d 77 c0 f3 8a d5 94 8f 73 5b ba d6 7f af 82 38 ca 25 d7 b2 6e 81 bd d7 de 39 70 22 18 37 f4 85 ab 67 81 1c 92 39 ff b3 37 d5 3b 52 94 23 60 8d f0 1c ad 9f 05 e6 18 cf c0 79 1f 80 5a a5 c2 0e d7 01 e5 6f bc 79 f8 33 50 e5 8d 19 2f 29 c8 e9 75 e5 13 5e fe db 37 f7 1f 0d 4f ce 0e f8 8c Data Ascii: /*:}%J%9v/7hS}ohGyN9ZJ6)tC%!P3dOo@>K{@yu98::Q_4.yu>>:Xtc}-e9g]Z_A36ws[8%n9p"7g97;R#`yZoy3P/)u^7O
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: f1 02 d9 25 f7 c4 06 59 2c 0e 71 c3 5d bf 8c 0f ac 21 b0 dd b8 3d d0 5e 0c 1b 42 a3 7d ad 25 70 a9 4f 4a 18 ef 80 35 4f de 50 57 41 ce a8 a5 32 0e 78 99 4d 76 30 1e be a3 a6 d1 8c 31 58 74 52 53 cf ac c1 2d 35 ad d1 7b 1e 1e ed 96 ef 7f 22 a0 57 5f e5 4d 12 d0 17 b2 46 c3 b2 b9 62 8d ef 00 71 fd 6e cf ff 24 16 8c fa ce 13 ad 1e 05 f5 06 39 0d 76 82 75 c7 3c 50 f4 01 60 e0 30 1b 82 5e e4 f8 f8 d6 cb 60 bf 64 75 d5 43 21 52 d9 f3 51 10 77 0a d8 05 46 49 c3 7d 3c 14 54 13 dd 39 ff 03 c0 17 c8 06 95 68 6c e2 23 90 79 e4 8b df 05 6a 88 91 90 39 00 68 aa 3a 2f bf f6 b3 0c 66 12 43 71 50 6b 55 bf 73 3f 76 1a fd 81 fc ec cb 5a 00 ca 65 14 fd 3e 1e 54 53 dd d9 f5 b3 70 ea 63 c3 7d bd 3d a4 b5 67 82 bc 9d 7b b1 c5 af 97 43 bf b6 be 9f f3 36 f4 ea 27 b2 3f 1c 9a 77 Data Ascii: %Y,q]!=^B}%pOJ5OPWA2xMv01XtRS-5{"W_MFbqn$9vu<P`0^`duC!RQwFI}<T9hl#yj9h:/fCqPkUs?vZe>TSpc}=g{C6'?w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49832	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:58 UTC	345	OUT	GET /js/app_v31.js HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:58 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:58 UTC	898	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 78 52 56 2b 55 65 59 6a 33 61 35 64 43 51 77 63 73 6c 4d 47 71 67 71 36 72 73 53 6f 34 5a 7a 63 55 6b 4a 61 75 4f 71 38 70 47 59 6e 55 57 61 71 74 59 77 57 48 62 61 6b 49 6d 51 61 74 47 54 61 4e 55 73 4f 36 68 4f 45 38 50 6f 51 33 43 67 46 37 30 2f 64 35 33 5a 6c 70 77 6d 67 74 64 7a 43 37 6a 64 50 6e 6e 78 79 4a 78 51 3d 24 75 71 73 43 79 77 41 78 6c 30 6a 41 32 37 33 76 36 36 42 7a 32 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: xRV+UeYj3a5dCQwcslMGqgq6rsSo4ZzcUkJauOq8pGYnUWaqtYwWHbakImQatGTaNUsO6hOE8PoQ3CgF70/d53ZlpwmgtdzC7jdPnnxyJxQ=$uqsCywAxl0jA273v66Bz2Q==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 32 32 30 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2205<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 67 34 37 6a 6a 64 6d 4f 2e 46 74 59 54 72 57 67 7a 6d 45 68 37 43 5f 79 6f 51 48 48 6e 63 42 63 33 51 6b 55 48 6f 64 69 36 5a 6e 5f 45 37 37 5f 4d 31 37 7a 61 75 52 37 61 71 58 35 62 42 4f 54 49 77 44 5a 4a 6a 39 31 71 6e 30 67 77 4b 36 69 70 53 6c 6c 66 6b 58 4e 73 6a 32 4d 64 77 47 51 72 44 4c 77 58 6d 30 49 44 47 70 65 42 70 52 6b 38 47 70 4c 54 4f 73 38 73 6d 57 4e 7a 41 37 69 5a 6d 74 33 72 56 6f 75 2e 43 56 70 35 32 43 4d 55 46 6d 31 71 5a 31 39 49 6d 79 72 37 64 4c 46 76 45 74 64 46 37 61 67 66 74 50 67 6f 55 37 73 47 42 37 4f 4f 2e 72 5a 34 6a 74 4e 37 77 57 47 58 73 67 5a 70 69 6f 31 61 53 77 6e 39 68 30 5f 56 33 6d 63 45 45 63 45 6b 58 38 31 2e 4c 57 5a 63 4b 32 6c 58 71 62 50 4b 65 2e 4a 53 49 72 57 48 74 7a 36 71 79 67 77 78 6f 4b 5f 63 57 61 Data Ascii: g47jjdmO.FtYTrWgzmEh7C_yoQHHncBc3QkUHodi6Zn_E77_M17zauR7aqX5bBOTIwDZJj91qn0gwK6ipSllfkXNsj2MdwGQrDLwXm0IDGpeBpRk8GpLTOs8smWNzA7iZmt3rVou.CVp52CMUFm1qZ19Imyr7dLFvEtdF7agftPgoU7sGB7OO.rZ4jtN7wWGXsgZpio1aSwn9h0_V3mcEEcEkX81.LWZcK2lXqbPKe.JSIrWHtz6qygwxoK_cWa
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 51 56 4f 36 36 52 5a 45 54 44 55 68 76 45 73 36 62 7a 41 78 50 39 35 67 5f 34 6b 74 31 77 69 4c 39 48 4a 39 55 2e 5f 38 35 4f 5a 42 64 48 58 74 76 6b 6a 61 54 4d 53 39 42 77 49 51 4e 5f 7a 55 78 33 49 65 50 4c 53 4a 76 71 36 73 6b 42 61 56 2e 74 57 56 78 48 72 4a 6b 36 31 77 48 6e 53 6c 41 38 37 35 43 70 38 55 54 6b 41 65 52 56 59 4d 65 69 51 75 37 49 33 4b 4b 51 54 34 4e 50 51 77 63 56 34 67 62 6d 66 51 76 73 69 68 36 65 47 50 32 33 57 38 64 5a 4c 43 32 2e 58 77 61 36 68 69 79 36 6d 42 65 69 74 66 75 59 66 65 78 63 64 38 6a 54 39 78 78 31 35 5a 4d 44 38 48 71 39 36 73 79 57 43 33 52 63 2e 4b 32 72 55 39 39 68 48 74 48 35 43 46 4c 48 46 62 61 6d 51 71 38 6e 75 62 62 73 64 34 48 50 5f 57 74 41 51 4c 62 36 4c 54 62 52 77 62 4a 33 6f 73 46 7a 69 61 37 63 65 Data Ascii: QVO66RZETDUhvEs6bzAxP95g_4kt1wiL9HJ9U._85OZBdHXtvkjaTMS9BwIQN_zUx3IePLSJvq6skBaV.tWVxHrJk61wHnSlA875Cp8UTkAeRVYMeiQu7I3KKQT4NPQwcV4gbmfQvsih6eGP23W8dZLC2.Xwa6hiy6mBeitfuYfexcd8jT9xx15ZMD8Hq96syWC3Rc.K2rU99hHtH5CFLHFbamQq8nubbsd4HP_WtAQLb6LTbRwbJ3osFzia7ce
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 61 7a 59 59 52 53 38 46 55 35 33 46 34 57 56 6b 6e 66 53 55 6d 38 74 36 72 51 79 4a 47 76 58 77 49 33 50 51 68 2e 34 72 79 6d 2e 34 54 52 4f 6a 6e 32 58 36 6f 4f 66 34 4d 75 45 46 30 54 77 72 49 68 6e 43 58 30 6c 6c 6a 77 56 70 45 70 42 45 6d 71 39 4c 35 62 2e 62 55 36 32 74 4e 39 42 4b 2e 47 41 79 72 78 34 77 4c 54 6c 69 4a 50 5f 65 51 43 63 37 4e 2e 57 49 6d 79 7a 45 55 56 78 6c 7a 52 41 39 44 48 6f 55 77 56 6f 39 42 65 65 47 68 38 7a 46 6a 76 71 6f 7a 4d 73 4a 39 68 47 7a 79 36 64 69 4d 52 79 4b 30 48 51 32 63 4c 68 61 54 79 62 73 72 6d 6a 4c 6e 4f 41 79 61 57 38 43 55 58 75 6b 56 6b 33 6b 62 53 58 30 48 33 7a 6b 78 70 62 55 73 59 62 54 50 56 6e 38 71 5f 2e 57 4e 36 66 54 73 61 56 53 5f 47 4f 7a 32 55 6d 69 70 6b 35 72 47 72 6b 71 75 70 4f 30 77 68 74 Data Ascii: azYYRS8FU53F4WVknfSUm8t6rQyJGvXwI3PQh.4rym.4TROjn2X6oOf4MuEF0TwrIhnCX0lljwVpEpBEmq9L5b.bU62tN9BK.GAyrx4wLTliJP_eQCc7N.WImyzEUVxlzRA9DHoUwVo9BeeGh8zFjvqozMsJ9hGzy6diMRyK0HQ2cLhaTybsrmjLnOAyaW8CUXukVk3kbSX0H3zkxpbUsYbTPVn8q_.WN6fTsaVS_GOz2Umipk5rGrkqupO0wht
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 43 6c 35 62 6a 35 71 34 5a 32 6e 41 6a 67 49 6e 4d 64 62 75 63 52 6c 67 33 65 78 61 42 59 4f 5f 6c 45 4e 69 70 52 53 72 5a 6c 32 65 71 69 6f 57 49 50 33 2e 4a 33 37 71 57 32 35 4c 74 6c 48 76 71 42 43 6e 49 44 74 50 79 67 66 4c 52 30 37 34 4b 37 63 6c 63 61 66 6f 77 6c 36 41 2e 70 75 66 75 34 57 5f 63 54 6c 4e 54 37 45 48 32 65 6d 6c 7a 37 58 2e 51 6d 54 61 63 48 50 36 61 4c 44 63 70 43 5f 58 4c 77 51 64 58 45 78 73 56 39 38 63 4a 63 70 6e 6c 46 45 54 4e 77 33 35 31 78 59 6d 47 43 4d 4c 59 6f 61 2e 6c 44 41 71 6b 48 48 67 36 6d 4d 71 4f 77 4b 66 4d 53 6e 4c 48 70 52 78 4a 64 36 59 58 55 63 56 61 4b 75 67 34 4b 58 48 6f 46 42 47 70 61 56 6c 34 71 73 50 41 41 54 36 50 78 38 43 30 54 2e 45 35 46 72 76 5f 39 45 59 57 5a 64 48 31 6b 2e 72 75 4c 6d 66 35 63 65 Data Ascii: Cl5bj5q4Z2nAjgInMdbucRlg3exaBYO_lENipRSrZl2eqioWIP3.J37qW25LtlHvqBCnIDtPygfLR074K7clcafowl6A.pufu4W_cTlNT7EH2emlz7X.QmTacHP6aLDcpC_XLwQdXExsV98cJcpnlFETNw351xYmGCMLYoa.lDAqkHHg6mMqOwKfMSnLHpRxJd6YXUcVaKug4KXHoFBGpaVl4qsPAAT6Px8C0T.E5Frv_9EYWZdH1k.ruLmf5ce
2024-12-17 10:51:58 UTC	503	IN	Data Raw: 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 6a 73 5c 2f 61 70 70 5f 76 33 31 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 66 78 6b 68 7a 71 72 6f 4a 44 33 57 46 68 58 41 51 71 42 69 69 2e 33 4c 43 31 68 65 72 56 6e 35 42 36 65 4e 49 51 64 74 35 42 67 2d Data Ascii: rch;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/js\/app_v31.js?__cf_chl_rt_tk=fxkhzqroJD3WFhXAQqBii.3LC1herVn5B6eNIQdt5Bg-
2024-12-17 10:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49834	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:58 UTC	1399	OUT	GET /images/YouMayAlsoLike.png HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:51:58 UTC	895	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: image/png Content-Length: 64412 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:09 GMT ETag: "fb9c-59c3156e91640" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1247 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2Bi3q8ktPcDlf1Kid7bibIZnQuJkaAXLqNUNWZFiAcoR2SB1o0cqk2uLl9wa4QyxRk8rcsKAog5rxFnIpRMz%2BrIBR5j8Rw%2FVyR24HbttHSn2nMpUTr2HHGALpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c6a084a42b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2362&min_rtt=2330&rtt_var=897&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1977&delivery_rate=1253218&cwnd=211&unsent_bytes=0&cid=c05dae9019201085&ts=449&x=0"
2024-12-17 10:51:58 UTC	474	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 44 08 02 00 00 00 56 2c 6c 45 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 18 58 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 79 69 38 55 ff d7 fe da c3 19 cc d3 31 4f c7 3c 45 c8 2c f3 1c 32 8f a5 1c c7 31 3b 71 1c 92 68 50 49 34 0f 12 8a 90 a9 42 93 29 14 0d 52 4a a2 52 a9 68 24 2a 52 2a e3 f3 82 fa fe 7e df ff ff cd 73 5d cf 7a b1 f7 ba ee 7d af b5 ee b5 f6 be 3e fb da fb 03 20 29 46 8b 8b 8b 41 f9 01 62 99 6c 96 a7 83 35 d5 3f 20 90 4a 1a 04 02 70 83 10 a8 03 17 8d 9e 10 67 e5 ee ee 02 00 f0 e7 fc 1f 86 00 4c 3d 01 04 00 a0 57 93 16 17 17 03 ff 3b 13 08 65 24 d0 01 10 77 00 08 09 4d a0 c7 02 20 97 01 70 09 7a 1c 8b Data Ascii: PNGIHDRDV,lEpHYs.#.#x?vXiCCPPhotoshop ICC profilexyi8U1O<E,21;qhPI4B)RJRh$R~s]z}> )FAbl5? JpgL=W;e$wM pz
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 98 d5 2e 4b 79 32 23 18 4e 7f fc 53 8c 04 3b af 3f 9c b0 48 7b 27 00 e0 07 40 2f a7 44 78 fb 2d ea 44 6f 26 45 fa ae 06 00 5e 00 f4 61 42 b4 97 f3 52 ec ab 94 08 9b d5 7f 38 ac 44 4f 1f 00 50 04 40 bf 87 b1 ec 3d 17 39 98 58 6c c2 9f be 30 2d 3a cd ce 0b 00 c4 00 30 4b 76 84 b7 e3 62 2c e6 cf 48 f0 77 f9 a3 21 94 61 6b b7 a8 01 0b 65 30 7d 96 b4 61 ec 38 b6 b5 e7 52 6c 46 5c 8c fb 12 1f 3b c5 88 71 f0 5c 9c 33 56 9b 90 e4 f5 27 f6 11 9b e5 bd 34 73 ec 4d 14 6d 95 fb a2 7e 6c 2a 8e ed ee bd a8 0d c7 c1 05 6c c0 16 a8 90 08 54 08 81 0d 10 05 91 0f c6 ea c7 80 ba 74 c5 1e 68 c0 82 70 60 80 e6 12 f2 27 c2 0f 68 c0 02 26 d0 c0 0b 52 e0 33 30 81 01 09 7f e3 ac 81 06 2c 60 40 12 30 61 ee 2f ba 78 d4 84 30 a0 01 0b 92 80 01 09 10 0d 1f 80 05 b1 b8 04 6e 8e 9b e2 Data Ascii: .Ky2#NS;?H{'@/Dx-Do&E^aBR8DOP@=9Xl0-:0Kvb,Hw!ake0}a8RlF\;q\3V'4sMm~l*lTthp`'h&R30,`@0a/x0n
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 87 92 91 52 84 d2 71 a5 0e a5 9f ca 2a ca 7e ca bb 95 eb 95 87 55 c4 54 9c 54 52 54 ce aa 0c a8 f2 a8 5a a8 c6 ab 16 ab f6 a9 11 d5 8c d4 a2 d5 4e aa 3d 54 47 d5 f5 d5 23 d4 f3 d5 bb 35 50 0d 03 8d 48 8d 93 1a 3d cb 08 cb 8c 97 31 97 15 2f 7b aa c9 ad 69 a5 99 a4 79 56 73 48 4b 44 cb 45 2b 5d ab 5e eb cb 72 c5 e5 81 cb 0f 2d ef 58 3e af ad af 1d a3 5d aa fd 42 47 50 67 95 4e ba 4e 93 ce 37 5d 75 5d ba 6e be 6e df 0a 9e 15 f6 2b b6 ae 68 58 31 a1 a7 a1 c7 d0 3b a5 d7 af 2f a4 ef aa bf 5b bf 5d 7f ce c0 d0 80 65 50 6d 30 62 a8 68 18 6c 58 60 f8 d4 88 62 e4 6e b4 d7 e8 8e 31 c1 d8 da 78 ab 71 b3 f1 6f 13 03 13 b6 c9 45 93 af a6 9a a6 d1 a6 55 a6 c3 2b 55 56 32 56 96 ae 7c 6b 26 6f 46 33 3b 6d 36 68 4e 35 0f 36 2f 32 1f b4 90 b3 a0 59 14 5b bc b1 54 b0 0c b5 Data Ascii: Rq*~UTTRTZN=TG#5PH=1/{iyVsHKDE+]^r-X>]BGPgNN7]u]nn+hX1;/[]ePm0bhlX`bn1xqoEU+UV2V\|k&oF3;m6hN56/2Y[T
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 4d 4a 4c bb 56 7e 35 e7 b4 10 b0 14 b6 12 b3 16 b7 91 b0 15 b5 a3 d8 f3 39 90 1d 16 1c bf 3b 8d ae 7a ed dc eb 72 db b5 7e 75 85 5b 9e fb 3e 8f 1d 9e 29 5e 6c ef 78 9f 04 df 8d 7e 5b fc 33 03 8e 06 16 af 39 bf b6 3a a8 6a 5d d9 fa 92 e0 d3 b4 c2 90 22 fa e9 d0 52 46 65 58 4d 78 63 c4 8d c8 ee a8 57 d1 13 b1 44 a6 c4 06 8d 38 93 78 47 96 4f c2 3a 36 23 31 26 29 7e 63 52 f2 a6 4d 69 29 db 36 9f 4c 6d 4a eb dd f2 69 eb fc 76 de 74 c9 1d ca 3b b5 76 e9 67 98 ec 36 cf b4 de e3 90 e5 91 cd da 5b b0 af 73 ff af 83 6a 87 d6 1e de 77 a4 f5 e8 58 8e c8 71 d3 dc b5 27 92 f3 0e e6 97 14 d4 9d bc 7b ea 65 e1 c4 69 bc 58 a4 44 b5 d4 f8 8c 53 99 7f 79 78 45 62 65 7a d5 fe b3 f9 e7 ce 9c bf 50 7d ad a6 bb 76 f0 c2 e4 25 e2 65 c9 2b da 75 76 f5 01 0d b1 8d db 9a 0e 5f 3d Data Ascii: MJLV~59;zr~u[>)^lx~[39:j]"RFeXMxcWD8xGO:6#1&)~cRMi)6LmJivt;vg6[sjwXq'{eiXDSyxEbezP}v%e+uv_=
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 06 cf ff ae 11 aa d5 bc e0 74 31 fc 52 c6 e5 b2 2b 77 ea c6 1a 04 1a 2d 9a 32 ae f6 b6 c8 b4 86 5d 3b 7f 7d b2 dd f4 c6 ae 9b 3d b7 15 3b 52 ef bc b8 6b 7d ef c2 7d f5 07 85 0f f1 1e da a3 b6 3e dd c7 4d 4f 59 cf e8 2f ce bc 5a 3b 54 f9 be 77 94 36 a9 b0 b0 00 b0 f8 1f 0e 00 80 68 00 70 4c 06 c0 9f 1f c0 eb 18 c0 3e 04 40 e5 2b 80 28 27 80 3b 0f 80 b7 31 a0 ab cc 00 a5 a4 00 62 27 f3 f7 fd 81 00 0e 9c 20 08 52 a0 0a 06 60 0f 7e 10 05 db e0 28 54 c2 75 e8 87 09 84 1b 51 45 ec 10 3a 92 8e 94 20 37 91 8f 28 17 aa 8d fa a1 e9 68 0d fa 12 e3 c6 cc b0 38 ac 14 7b 86 f3 e3 8e f8 76 bc 19 ff 45 30 20 24 10 ce 12 5e 13 85 89 ce c4 74 e2 55 e2 0f 92 0e 89 49 aa 26 7d 25 eb 92 93 c9 d7 39 b8 39 02 39 aa 38 e6 39 bd 39 6b b8 84 b8 36 71 0d 71 bb 70 37 f2 a8 f3 9c e4 Data Ascii: t1R+w-2];}=;Rk}}>MOY/Z;Tw6hpL>@+(';1b' R`~(TuQE: 7(h8{vE0 $^tUI&}%999899k6qqp7
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 9a bb 41 0e eb 5a 83 97 d3 0a e8 9c a1 69 8c ef e1 b1 11 9f a2 22 a3 3f c5 c6 30 bf c4 c5 c7 7f 4f d8 c8 9e 4e 4a 4b 16 df 74 63 73 7c 9a fc 96 c7 db 76 a7 1b ee 78 bb 2b 6b b7 46 66 47 d6 fa ec 6f fb d2 0f 88 1d bc 70 d8 e5 c8 c8 b1 cc e3 2a b9 1d 79 61 05 84 93 c5 85 16 45 cf 8b d9 a5 bc 67 ca cb ad 2a 5e 55 a5 9d 93 39 7f bd 26 f4 02 c7 c5 da cb be 57 e6 ea 4b 1b 9d 9b be 35 9f 68 b5 bc f6 b1 ed c0 0d e9 9b 47 6f f3 75 ec eb e4 bb 7b ac 4b e6 7e 45 b7 ee c3 d6 47 8e bd 8f 1e fb 3e e9 ef f7 7d d6 fd c2 76 e0 f2 2b b9 d7 bb 06 c7 de 04 be ed 7f bf fe c3 f0 30 73 64 78 d4 73 ac e6 f3 f8 57 ea f8 ca 09 9b 6f 06 93 d4 c9 cf df 9b 7e b0 a6 24 a6 da 7f d2 7e 7e f8 15 f3 6b e2 37 fb f7 f3 69 cb e9 b2 19 9e 99 84 99 db b3 7c b3 7e b3 45 b3 c3 73 3a 73 9b e6 da Data Ascii: AZi"?0ONJKtcs\|vx+kFfGopyaEg^U9&WK5hGou{K~EG>}v+0sdxsWo~$~~k7i\|~Es:s
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 31 37 2d 30 32 2d 31 36 54 32 31 3a 30 32 3a 33 31 2b 30 38 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 62 30 37 32 35 30 64 65 2d 35 31 33 66 2d 34 32 61 61 2d 61 66 65 30 2d 65 64 30 61 64 30 66 64 35 61 36 64 3c 2f 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 65 30 32 39 33 63 30 2d 33 34 64 36 2d 31 31 37 61 2d 39 30 34 62 2d 63 39 64 38 37 32 30 38 39 31 30 30 3c 2f 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 Data Ascii: mp:ModifyDate>2017-02-16T21:02:31+08:00</xmp:ModifyDate> <xmpMM:InstanceID>xmp.iid:b07250de-513f-42aa-afe0-ed0ad0fd5a6d</xmpMM:InstanceID> <xmpMM:DocumentID>adobe:docid:photoshop:8e0293c0-34d6-117a-904b-c9d872089100</xmpMM:DocumentID>
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 35 62 61 66 39 61 66 37 2d 62 35 65 36 2d 34 35 39 63 2d 38 31 34 65 2d 37 36 63 62 35 61 62 33 61 62 30 32 3c 2f 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 77 68 65 6e 3e 32 30 31 36 2d 30 35 2d 32 30 54 30 38 3a 34 37 3a 35 35 2b 30 38 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: Evt:instanceID>xmp.iid:5baf9af7-b5e6-459c-814e-76cb5ab3ab02</stEvt:instanceID> <stEvt:when>2016-05-20T08:47:55+08:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Macintosh)</stEvt:softwareAgent>
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 38 63 62 66 34 66 61 30 2d 33 61 34 65 2d 34 35 38 66 2d 38 30 36 64 2d 66 35 32 64 64 34 66 30 64 32 37 66 3c 2f 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 77 68 65 6e 3e 32 30 31 37 2d 30 32 2d 31 36 54 32 31 3a 30 32 3a 33 31 2b 30 38 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: vt:instanceID>xmp.iid:8cbf4fa0-3a4e-458f-806d-f52dd4f0d27f</stEvt:instanceID> <stEvt:when>2017-02-16T21:02:31+08:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Macintosh)</stEvt:softwareAgent>
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 38 63 62 66 34 66 61 30 2d 33 61 34 65 2d 34 35 38 66 2d 38 30 36 64 2d 66 35 32 64 64 34 66 30 64 32 37 66 3c 2f 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 35 31 30 39 38 34 36 65 2d 32 63 33 32 2d 31 31 37 61 2d 62 37 38 63 2d 38 35 33 33 30 64 63 64 61 31 31 35 3c 2f 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 52 65 66 3a 6f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3e 78 6d 70 2e 64 69 64 3a 34 64 63 32 63 39 64 38 2d 37 32 33 39 2d 34 61 64 31 2d 62 66 30 66 2d 33 37 33 65 33 Data Ascii: tanceID>xmp.iid:8cbf4fa0-3a4e-458f-806d-f52dd4f0d27f</stRef:instanceID> <stRef:documentID>adobe:docid:photoshop:5109846e-2c32-117a-b78c-85330dcda115</stRef:documentID> <stRef:originalDocumentID>xmp.did:4dc2c9d8-7239-4ad1-bf0f-373e3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49835	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:58 UTC	345	OUT	GET /images/bg.jpg HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:58 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:51:58 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 31 44 55 50 33 33 6f 39 47 52 51 76 35 54 70 73 44 6d 6e 61 34 30 50 78 62 4f 2f 4e 4e 30 39 5a 72 49 78 76 6c 48 62 52 42 51 74 45 4a 4e 32 43 6f 6c 6d 4c 52 6f 52 30 35 30 54 76 34 50 63 4c 64 78 72 63 70 6d 58 72 65 58 68 57 73 37 75 6c 2f 43 34 62 71 39 59 41 63 6b 71 63 61 5a 48 73 7a 6f 4c 55 58 7a 6f 57 48 67 55 3d 24 49 30 6b 49 70 57 6b 6b 62 34 31 30 44 39 47 6b 4b 2f 68 63 7a 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 1DUP33o9GRQv5TpsDmna40PxbO/NN09ZrIxvlHbRBQtEJN2ColmLRoR050Tv4PcLdxrcpmXreXhWs7ul/C4bq9YAckqcaZHszoLUXzoWHgU=$I0kIpWkkb410D9GkK/hczQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 32 32 31 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 221b<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 6f 58 48 50 51 74 31 67 6e 37 69 57 7a 7a 6f 38 61 79 47 74 62 76 75 38 77 65 48 6f 57 41 2e 4c 4f 65 72 79 66 59 59 45 51 45 76 48 6a 35 65 42 6b 47 52 57 4b 67 2e 33 59 55 33 35 7a 45 70 49 63 77 37 74 35 46 4a 32 43 73 4a 74 78 36 66 43 71 64 30 53 45 33 64 38 53 61 5a 58 30 4a 46 66 4b 34 71 76 77 69 5f 31 66 4a 70 39 63 7a 48 7a 64 45 51 56 6b 63 74 78 34 48 53 52 56 41 4a 59 52 36 2e 4d 57 36 6a 57 51 35 4a 4b 55 33 6d 4d 33 50 33 4d 6c 32 6e 68 30 63 36 7a 79 6d 38 52 7a 69 37 39 39 5a 4e 66 4a 75 30 71 49 46 73 59 79 66 74 38 6d 39 33 50 66 50 64 48 57 51 58 31 4d 57 51 70 4c 5f 43 65 45 38 59 51 37 34 4e 7a 41 71 54 6f 54 2e 75 49 65 30 76 44 78 38 49 34 52 45 5f 7a 43 78 6b 7a 45 50 73 6b 66 46 61 47 58 35 52 58 2e 69 6c 6d 4c 32 59 69 54 2e 72 Data Ascii: oXHPQt1gn7iWzzo8ayGtbvu8weHoWA.LOeryfYYEQEvHj5eBkGRWKg.3YU35zEpIcw7t5FJ2CsJtx6fCqd0SE3d8SaZX0JFfK4qvwi_1fJp9czHzdEQVkctx4HSRVAJYR6.MW6jWQ5JKU3mM3P3Ml2nh0c6zym8Rzi799ZNfJu0qIFsYyft8m93PfPdHWQX1MWQpL_CeE8YQ74NzAqToT.uIe0vDx8I4RE_zCxkzEPskfFaGX5RX.ilmL2YiT.r
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 6b 7a 59 79 54 42 75 76 78 62 62 6b 51 70 65 4b 70 36 31 52 78 32 61 31 4a 6d 43 5f 35 57 52 74 75 2e 67 57 41 79 64 43 7a 37 6f 6c 69 64 41 59 62 62 70 68 4a 6b 78 37 7a 41 79 5a 4c 59 69 52 62 69 55 4e 6c 6e 61 47 4e 43 4f 31 4b 38 4f 67 58 52 6f 6a 6a 41 79 59 45 6b 43 51 71 5f 4b 31 33 32 38 78 36 65 2e 4f 32 44 45 41 63 57 75 36 68 7a 35 77 70 42 70 75 64 58 48 72 7a 47 31 38 4b 5f 77 36 70 71 49 68 50 57 54 62 6b 61 64 66 4d 36 65 4f 73 35 30 51 6f 6e 76 5a 6b 56 6a 45 49 6f 4d 38 32 44 34 31 42 42 74 47 67 4e 56 34 38 59 32 58 30 37 48 5f 6f 52 39 6a 47 4c 34 6e 64 58 39 42 52 73 4b 36 46 34 6b 34 65 45 35 39 6b 78 36 64 57 71 77 39 42 4d 49 74 78 44 6b 57 50 2e 70 6d 69 74 78 34 36 5a 62 45 54 5a 2e 4b 55 7a 35 68 5f 72 76 75 73 6f 5a 4e 48 76 54 Data Ascii: kzYyTBuvxbbkQpeKp61Rx2a1JmC_5WRtu.gWAydCz7olidAYbbphJkx7zAyZLYiRbiUNlnaGNCO1K8OgXRojjAyYEkCQq_K1328x6e.O2DEAcWu6hz5wpBpudXHrzG18K_w6pqIhPWTbkadfM6eOs50QonvZkVjEIoM82D41BBtGgNV48Y2X07H_oR9jGL4ndX9BRsK6F4k4eE59kx6dWqw9BMItxDkWP.pmitx46ZbETZ.KUz5h_rvusoZNHvT
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 65 57 65 4f 4b 70 66 65 6c 65 65 57 53 4a 49 31 51 6d 54 51 5a 66 73 52 78 59 74 46 34 42 46 79 37 44 66 76 45 52 46 45 4c 63 6b 65 47 6c 4c 58 46 4c 67 51 67 73 79 4f 4b 64 4f 43 44 55 4c 45 68 32 33 34 42 36 37 71 55 5a 64 6d 50 32 45 55 30 31 34 58 38 4f 41 33 54 31 6e 68 6a 63 55 4c 66 72 4e 72 7a 38 51 36 42 52 5f 2e 77 7a 6e 53 64 66 5f 37 76 65 37 45 6f 63 69 72 69 57 70 5a 73 6b 68 6e 6e 69 41 68 4f 54 70 66 75 6b 38 4e 70 74 70 6e 6f 41 45 78 6d 32 6c 4e 65 79 68 4f 74 72 44 55 4f 76 47 59 73 69 61 5f 69 4b 69 32 6f 38 65 47 6f 6b 79 79 57 70 65 44 48 78 73 65 42 76 44 47 6d 38 43 6f 6c 33 38 41 4d 34 4f 62 30 44 59 31 65 4d 33 74 73 62 69 67 69 30 4a 6e 6b 42 45 34 64 4c 4c 63 43 6b 62 64 70 37 64 76 6a 6b 50 71 6e 56 4d 35 49 72 66 50 44 4a 5f Data Ascii: eWeOKpfeleeWSJI1QmTQZfsRxYtF4BFy7DfvERFELckeGlLXFLgQgsyOKdOCDULEh234B67qUZdmP2EU014X8OA3T1nhjcULfrNrz8Q6BR_.wznSdf_7ve7EociriWpZskhnniAhOTpfuk8NptpnoAExm2lNeyhOtrDUOvGYsia_iKi2o8eGokyyWpeDHxseBvDGm8Col38AM4Ob0DY1eM3tsbigi0JnkBE4dLLcCkbdp7dvjkPqnVM5IrfPDJ_
2024-12-17 10:51:58 UTC	1369	IN	Data Raw: 39 4f 56 4b 45 35 2e 49 71 56 56 37 49 73 51 6b 6e 64 64 6e 36 50 65 6c 4a 74 33 69 46 70 34 57 72 4c 68 64 35 36 64 36 6f 48 5a 4f 74 49 6a 46 79 49 44 31 6e 48 74 79 61 7a 76 72 44 32 71 4a 7a 6b 68 69 6e 32 76 67 77 41 45 4e 42 39 5f 62 73 39 5a 4f 56 75 72 53 43 41 72 36 37 46 73 5a 78 44 71 6b 42 55 6c 4b 50 77 58 56 6e 5f 51 6d 33 6b 68 6f 44 56 5a 6d 74 61 31 44 30 69 6a 54 35 2e 47 5a 31 50 48 39 76 44 61 66 6a 34 49 53 71 54 38 79 75 79 49 2e 68 7a 73 50 58 4b 57 39 37 48 6d 4b 69 34 67 4b 39 59 4f 34 6b 5f 41 36 45 4c 4d 55 74 61 37 76 52 71 69 6a 6e 68 68 4e 56 76 4f 33 48 61 37 43 4c 62 36 38 70 71 2e 31 39 63 76 69 37 4e 61 7a 6f 76 58 73 64 73 77 32 6e 63 46 76 47 4a 64 79 56 44 52 75 43 61 37 43 6f 49 35 50 6f 41 42 72 74 46 38 47 49 69 61 Data Ascii: 9OVKE5.IqVV7IsQknddn6PelJt3iFp4WrLhd56d6oHZOtIjFyID1nHtyazvrD2qJzkhin2vgwAENB9_bs9ZOVurSCAr67FsZxDqkBUlKPwXVn_Qm3khoDVZmta1D0ijT5.GZ1PH9vDafj4ISqT8yuyI.hzsPXKW97HmKi4gK9YO4k_A6ELMUta7vRqijnhhNVvO3Ha7CLb68pq.19cvi7NazovXsdsw2ncFvGJdyVDRuCa7CoI5PoABrtF8GIia
2024-12-17 10:51:58 UTC	525	IN	Data Raw: 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 69 6d 61 67 65 73 5c 2f 62 67 2e 6a 70 67 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 6f 58 32 71 48 31 2e 69 52 6e 55 72 36 6e 59 46 47 7a 73 43 70 4e Data Ascii: 1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/images\/bg.jpg?__cf_chl_rt_tk=oX2qH1.iRnUr6nYFGzsCpN
2024-12-17 10:51:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49840	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	609	OUT	GET /movies/12328215740-poster-The-Undeserving.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:59 UTC	920	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:59 GMT Content-Type: image/jpeg Content-Length: 21231 Connection: close Last-Modified: Mon, 16 Dec 2024 04:37:13 GMT ETag: "52ef-6295bbc06342e" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3374 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X06JlqjpFsyHTzuuKLDIsJkfjz4jBhl%2FWCflv8%2F%2B4AANFZQJuwTTjwhcUusPMuDSeF2Z3v%2FPkIv68nltn4c3aSolSQ2OTIcERifqvZYIQPdplafSdO%2BZD2YuSm4x9RE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c71c8df729f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1817&min_rtt=1815&rtt_var=686&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1187&delivery_rate=1589548&cwnd=169&unsent_bytes=0&cid=c1091c3d9c6460d4&ts=448&x=0"
2024-12-17 10:51:59 UTC	449	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 07 05 06 06 06 05 07 06 06 06 08 08 07 09 0b 12 0c 0b 0a 0a 0b 17 10 11 0d 12 1b 17 1c 1c 1a 17 1a 19 1d 21 2a 24 1d 1f 28 20 19 1a 25 32 25 28 2c 2d 2f 30 2f 1d 23 34 38 34 2e 37 2a 2e 2f 2e ff db 00 43 01 08 08 08 0b 0a 0b 16 0c 0c 16 2e 1e 1a 1e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 d3 77 13 23 4c 20 Data Ascii: JFIFC!$( %2%(,-/0/#484.7./.C...................................................Jw#L
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 49 7b 2d 48 a9 5a 8a 51 e2 88 b4 73 3e c2 a4 27 9a b7 ca b5 63 56 a5 36 b3 ec 1d 60 2a cf 53 1f 55 5d 39 68 e1 88 d8 6e 06 f3 87 23 bc ea 88 73 e0 ec 78 bb 75 b2 e9 bb 32 ee 70 36 e4 cb d7 16 e3 b1 ac fa dc cf a1 0e bf 9f ed fc cf 49 3b 5c 6f 67 12 1b 61 01 20 45 a6 ae 1e be 6e de 60 2b 9d ac fa 88 50 6b 26 23 47 22 d0 d7 9d 3d 32 d0 cf 4e cb 8b bd a2 d5 a9 c6 bc c3 53 85 b7 23 11 da f6 5d da 9c dd b4 db ce dc cf 9b 23 58 48 7c df 67 0d 1c c8 1a 35 2c ee a6 bc 77 5a 33 1d 10 e5 dc 77 7f 2d 77 f3 b8 df 9f e7 7d 9e 7e ef 3e e7 9d 18 9d 33 74 ca c0 c4 e8 85 e4 b1 a6 af 37 ad ab cd d2 da cb 5a fc dc ab 58 7a e7 81 d5 c5 02 15 cd 5a 80 62 37 62 3a 45 59 59 0f e5 d0 ec 37 e4 e9 1c 7c a7 bf 83 73 9b 76 26 f7 f3 df 35 ba 54 d9 5e 4e 98 51 68 e7 3f a7 a5 cd d1 a1 Data Ascii: I{-HZQs>'cV6`*SU]9hn#sxu2p6I;\oga En`+Pk&#G"=2NS#]#XH\|g5,wZ3w-w}~>3t7ZXzZb7b:EYY7\|sv&5T^NQh?
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 57 6f 30 f4 9d 9f 3f d1 6f 0d d5 d6 07 4b 53 93 a1 2d b1 cb ea e6 15 cd 59 56 a9 4b cd 5a 2a f3 a1 e7 5b 4d 16 34 6f 2d 5a c6 9d c4 a7 7f 9f cd fa 5e 75 71 d3 7b 8b 5e eb 96 f8 ae a8 e7 7a f3 5f 6c fa 6f 1f d9 36 7a 12 5e 5f 57 3e a7 27 4e 67 57 3e 6f 57 3a da 66 3a 91 52 b0 fc 10 91 e3 66 b2 e8 34 6a c6 7b 4a a2 c2 7b 11 5f 4b c9 e7 fa b8 c9 96 9d f7 95 d1 d7 7a 5c 5c 4e 1b f1 9d 52 1b 9e 9f c7 f6 d4 d2 57 d3 35 37 c5 fe 7d d7 d3 24 76 c2 94 85 52 2b 89 08 61 33 b3 c6 e6 8d ac 10 34 76 e3 d5 e5 f4 d9 cf 54 bd 4f 9e cf 25 9c 37 d4 e3 eb d5 83 37 6c 71 fb 39 83 ac 6f 79 9e cd 26 81 a6 4b eb 93 b8 6e 1b c9 2d 70 ad 14 6a 95 22 a9 ab 9b cd 16 74 15 e4 37 17 9b 0e 98 ea 72 fa a6 72 87 77 8e 3c ed de 6e d3 e5 b1 a2 95 df 99 5e 8e 61 dc b3 cb df b3 c5 e8 86 f3 Data Ascii: Wo0?oKS-YVKZ*[M4o-Z^uq{^z_lo6z^_W>'NgW>oW:f:Rf4j{J{_Kz\\NRW57}$vR+a34vTO%77lq9oy&Kn-pj"t7rrw<n^a
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 77 69 ce 65 f8 97 24 fd 1f 7e 0f 9a ee 3c 9c ca c7 8e 33 b5 bc ec 91 1a ee d1 b7 35 da be 88 78 b5 aa a6 14 9c 65 14 39 0a bd b4 f1 c9 8c cc 3f 6c df df 8f f6 d1 be f1 a5 53 f5 48 9c 46 da a2 f1 c9 1f 32 a5 e4 7b 36 6e 2b 22 b4 c7 66 95 51 5a c6 68 c4 c3 0b 6e 32 be 3d c7 a1 be b1 52 1e 50 ae f1 04 af ca d0 a2 05 13 53 c7 ee 37 a5 20 1a 9c 4a 8a a4 6f 2d 58 9f 10 bc 66 84 f4 a8 f2 a7 2c cf de de ee d3 ce d1 de a4 02 71 da 6d 29 f9 43 b4 56 8c a1 dd f6 df 62 62 93 3f 28 3c 4e 50 98 4f 4d e6 31 fb 33 fe 33 6b ed dd 16 97 68 51 84 28 c0 4d fc 23 92 13 cb af 4d 96 22 8d f6 8a c0 4b 6e dc 28 f2 78 c1 07 b0 cd fa 62 9d eb c9 5d d7 3d f9 ae 39 52 fa 66 a0 94 8c 9c 93 6b db 66 f5 8d c8 5a f6 9d b4 b4 0a f8 8e 9b c1 0e c6 6d d0 b1 9b c1 ee da 6d 28 3b 1b 4c 63 f7 Data Ascii: wie$~<35xe9?lSHF2{6n+"fQZhn2=RPS7 Jo-Xf,qm)CVbb?(<NPOM133khQ(M#M"Kn(xb]=9RfkfZmm(;Lc
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 4f 6e 6f 87 0f a7 18 b9 3a 42 e9 f6 4d a7 2b 89 81 7c 85 13 f9 78 7e 88 e0 8c 7b 47 03 f9 78 b7 67 1a e8 94 22 fc 9a a5 59 29 08 d4 78 45 14 71 fa 89 b5 da 3c bb 62 46 05 f2 22 24 6a f5 1e 8c 7a f2 c9 64 9c bc b2 19 f2 43 c3 34 f9 fd 68 df e4 66 ab ff 00 2b 17 93 50 ba 1e cd 6d 5b e2 d3 cb 27 68 68 e4 f8 f1 da 38 e4 fc 21 e1 9f e8 71 92 f2 24 a8 a1 23 04 7e 46 7d 5c b1 cf 8a 42 fe 23 2f fa 99 67 2c d2 e6 56 ca 4e 3e 0c 3a c9 45 d4 fc 1a 87 79 59 0f b9 19 7c 0c 8d 4f c1 e9 25 e4 7d 0e 4c b5 f9 1a 2d f8 df 16 24 85 b4 8c b8 d7 94 46 54 46 26 1f 26 7d 32 cb 1a fc 9c 1f 3e 0c 8d 45 52 25 c5 ae cc 98 b8 f6 bd 98 55 cd 19 17 46 6c 9f 85 b6 39 c9 ae c9 32 ac 58 45 81 19 71 f0 7b 62 57 21 16 39 a8 f9 39 c5 f8 64 d5 aa 1a a3 03 b5 46 35 d8 da 5e 4d 7e 15 6b 2a 31 Data Ascii: Ono:BM+\|x~{Gxg"Y)xEq<bF"$jzdC4hf+Pm['hh8!q$#~F}\B#/g,VN>:EyY\|O%}L-$FTF&&}2>ER%UFl92XEq{bW!99dF5^M~k*1
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: ba 23 1e ce 24 d0 c4 35 43 da c4 c8 b3 2e 67 cd d0 b3 c8 fe 60 73 e5 2b 16 7c 7f b3 53 96 2b 13 e2 fc 8b 6d 3f 8b 18 9d 99 a5 6c 7b 46 74 c8 fc 95 a3 2a e8 aa da 63 2a b7 93 2c f5 11 17 62 8d 3b 32 79 f6 48 42 21 d2 a2 cb a3 2b f9 0c 4a d9 c6 8c 79 1c 09 e5 b2 59 3a 3d 41 ca c9 0e 42 92 43 63 7b 51 8e 3d ed 4e 47 16 7a 67 a6 3d a0 bb 2b a3 f1 b4 fc ed 8f ee 39 16 32 c5 26 36 73 76 32 fd 96 5b 1c 99 cc e4 ce 6c f5 1e ea 54 7a 8c e6 73 24 ef 68 1c 8e 45 ed 64 a5 b7 e3 fb 44 59 65 88 77 17 4c 94 ec b3 91 62 4e 5d 2d f2 e1 78 d2 6f f3 fd 9d 9c bd b8 f2 4a 0e d6 f9 5c 9b f9 6d 43 fe c3 af a3 39 f3 77 b6 a2 50 93 5c 7f 5e f5 16 fc 7f 67 5f 45 49 c7 c7 ff 00 07 4f e5 fd 6f ff c4 00 29 11 00 02 02 01 03 03 04 02 03 01 01 00 00 00 00 00 00 01 02 11 10 03 12 21 04 Data Ascii: #$5C.g`s+\|S+m?l{Ftc,b;2yHB!+JyY:=ABCc{Q=NGzg=+92&6sv2[lTzs$hEdDYewLbN]-xoJ\mC9wP\^g_EIOo)!
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 8a 28 db 9a 36 9b 4a 16 19 45 76 2f d9 a2 b0 a2 51 45 1e 32 a5 7f b2 d5 e6 29 7d 7e e2 55 88 26 bc f7 b9 25 fb 8e 29 f9 ff 00 c1 d6 f0 be 6f ff c4 00 3c 10 00 01 03 02 03 07 02 03 06 04 05 05 00 00 00 00 01 00 02 11 03 12 10 21 31 04 13 20 22 41 51 71 32 61 30 81 91 23 40 42 62 a1 b1 14 33 52 d1 50 53 92 c1 e1 05 24 82 b3 f0 ff da 00 08 01 01 00 06 3f 02 50 c6 97 78 59 d0 7f d3 1f e4 bf e8 ae 75 27 80 3d b8 25 ac 27 c0 50 f6 96 f9 c2 77 2e 8f 0a d2 d8 38 5c 18 f3 f2 4f 07 a6 58 9a 8d 61 21 49 a2 f8 44 11 04 64 83 40 92 57 f2 1f f4 40 d4 61 6c f7 e0 6e d0 ca ce 05 f4 f3 e5 9e a9 a0 bf f1 06 fa 7d ca a6 33 e6 60 76 6a 95 22 60 3d c1 aa ed eb 49 b7 fa 11 a2 ea c2 d3 c9 e9 e9 1f dc 70 16 8a 84 06 c1 6c 8e ed bb f7 0b 7a e7 c9 11 02 23 5f f9 9c 29 4d 47 41 0d Data Ascii: (6JEv/QE2)}~U&%)o<!1 "AQq2a0#@Bb3RPS$?PxYu'=%'Pw.8\OXa!IDd@W@aln}3`vj"`=Iplz#_)MGA
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: ae 2d 1e d9 a1 4d cf fb 63 48 d4 0e f7 69 5b 1d 3d e7 2d 4a 77 3f f3 2a e6 93 ad 7d e3 30 a9 d2 ab 50 be bb 6a ce 63 f0 f1 6d ed 61 33 96 9f aa ac 39 80 de 34 2a 56 cf bc 2a bb db 85 4a 75 5c 44 f6 28 b9 c4 97 38 ad 89 bc fe 89 3e 55 06 b8 9c a9 4f cd 51 aa d0 e7 7d bf a7 bb 55 1d a6 a5 db da cf 74 ca a0 d6 07 54 a1 b4 34 17 b6 35 94 fa 0c cd ba b5 51 a4 03 dd bd d9 60 fb 3b ba 65 26 dd 9d 36 b8 cf 75 b0 59 55 cc 9a 7c e6 d5 46 b3 75 ab 4c 13 96 be e8 d3 07 95 ed 32 b6 1d 95 ce f4 b2 e7 79 54 e2 63 aa aa e7 cd c5 e7 55 ff 00 4e 0f ba c2 c2 1d 3e eb 66 a3 77 23 69 ad a0 30 9f 58 1f 2c 95 e6 93 43 ea 3b 75 a7 48 e2 75 cc 2e 63 f5 8d 42 14 29 53 70 17 4b 8b 95 4b 98 e7 17 44 42 7e d0 e1 52 c3 4c 08 19 66 98 e3 d0 ca e7 de b4 4f e1 66 a9 d5 c8 21 b1 0d 05 5b Data Ascii: -McHi[=-Jw?}0Pjcma394V*Ju\D(8>UOQ}UtT45Q`;e&6uYU\|FuL2yTcUN>fw#i0X,C;uHu.cB)SpKKDB~RLfOf![
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 04 35 17 44 15 19 fd 7c 42 b6 8f 52 b3 d3 b4 25 de 7f ac fd 9d 39 8a bd 0d cf cf 06 26 68 81 4a 68 8b 34 28 9e 20 1f 2c b1 91 01 39 4a 0c c1 f4 44 94 98 71 b3 89 e4 26 1e 27 02 6c bd a5 6a f2 b7 6c 40 79 36 2c fc cc 03 5c 78 9c 66 74 cd 68 71 81 aa 8d b4 ef 00 47 01 99 25 b8 e2 91 ab 70 f0 c6 6f 84 17 5b e6 5b b4 65 49 9e ac 96 bb e3 40 1d 06 48 9d 14 36 c2 73 1d e9 89 6e 58 97 88 81 e9 62 11 0d 83 43 33 2d e1 64 bc 60 e1 09 50 8a 2f f9 95 30 be 6f 98 a0 77 3b c3 e8 17 e2 26 0e 59 60 ac a6 8e 25 1d 51 99 56 34 a2 06 7a 16 54 bd c4 6e 54 10 f0 4a 08 46 7b 10 64 f2 ca cd 73 15 a4 b9 b9 40 bf 51 b9 74 15 87 73 b5 ae 6e 5f 7e 40 79 87 b3 37 67 0a f1 0a 9d 39 0a 86 c3 0a e5 78 e3 cb 36 05 41 0b 17 41 94 66 d1 e4 43 49 a3 24 d7 94 a6 ee 5d 37 00 52 b9 c7 74 a3 Data Ascii: 5D\|BR%9&hJh4( ,9JDq&'ljl@y6,\xfthqG%po[[eI@H6snXbC3-d`P/0ow;&Y`%QV4zTnTJF{ds@Qtsn_~@y7g9x6AAfCI$]7Rt
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 1e 07 b7 7e 62 aa a1 a7 93 97 f1 29 a7 21 47 03 8d 60 88 c3 74 fe 31 85 f6 ee 3c 10 f5 0e c2 b5 ce d3 c4 a1 58 77 1b d3 71 01 5d c1 16 c8 f1 9c aa 2d e3 77 08 dd a4 e2 76 7f f1 1b a8 70 e2 f8 65 bb db 8f 7b 51 fc c5 57 91 29 c9 52 db bd 1b 3b 9e 16 0b 9c 0c fe 25 c0 6d b3 dd d7 f1 15 58 d4 38 4d a1 02 28 95 06 6c fb 98 01 98 42 1d 37 ba 03 c2 73 14 d4 05 56 b4 04 47 c5 81 ed 7f dc 39 df c5 03 e7 53 63 15 40 2a 20 6f 65 3e 5c 41 76 39 ed 42 8a f3 84 7e 17 33 f9 81 ac 6b 86 07 1d d1 b6 43 32 bc 98 0d 0f f3 07 0a c8 fc 50 e3 98 74 b3 97 99 6b 71 79 8c 3c 56 03 2b ef 35 26 a6 b1 dd 2f 04 d7 e3 19 53 88 15 55 15 54 ac 31 3e 59 48 4a 22 72 39 a9 e1 ed 91 39 f5 01 ea 17 ee 5c 78 8a 4b be 4d 94 b9 7b 7a 12 9f ee 7a 74 b0 fd 00 5c 04 a3 98 12 89 88 6d 99 21 f6 a6 Data Ascii: ~b)!G`t1<Xwq]-wvpe{QW)R;%mX8M(lB7sVG9Sc@* oe>\Av9B~3kC2Ptkqy<V+5&/SUT1>YHJ"r99\xKM{zzt\m!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49842	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	604	OUT	GET /movies/12327191509-poster-Martingale.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:59 UTC	916	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:59 GMT Content-Type: image/jpeg Content-Length: 19184 Connection: close Last-Modified: Mon, 16 Dec 2024 04:37:00 GMT ETag: "4af0-6295bbb3fe1b2" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3374 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9LijrOSA1lQrWRgKW3meWtZmW553RiJQye0nXb5bw4tjQPG5kta06npI4E6kq%2BkvBZ2fKEa4k9lOdrj1mspoy1RSi601aoSgh%2FYX2lhg4Xac%2BMOn5sBY8EBfnwccVDY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c728e3bde9b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1492&min_rtt=1484&rtt_var=573&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1182&delivery_rate=1882656&cwnd=192&unsent_bytes=0&cid=b040678ee7cf0009&ts=446&x=0"
2024-12-17 10:51:59 UTC	453	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 01 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 04 05 06 03 07 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c2 f6 fc aa 43 03 b4 e0 e0 e3 40 e8 70 Data Ascii: JFIF''#" "#>1++1>H<9<HWNNWmhm''#" "#>1++1>H<9<HWNNWmhmJ5C@p
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: d2 5c dc 84 24 c6 a7 92 42 21 5e 67 d1 ea 7c 1f 41 79 9f 59 21 31 c1 01 a9 03 40 d0 0b 8c e2 00 c8 31 f4 4d d0 68 e6 28 b3 8f 91 fa 1f 3b 9f d5 9b 98 c0 72 a3 07 69 dc 4c 5d e2 fd 03 91 da dd f2 fb 32 54 d2 48 18 1c 1c 66 00 ce 44 58 39 91 a7 d5 9b 3f b3 0d 55 f9 e3 4e 1a 2c 5b ac 68 bf cf 3b 1c 5a 2d 54 71 0e 4c 99 04 ed 11 13 1c e8 4f 53 cf e8 6e b9 5d ae 8a 5d 23 27 07 89 d0 7d 54 8d 37 69 80 59 1a 70 f3 ce cf 07 1d d2 e6 00 90 dc 12 7c 5a e4 df 11 73 64 ea db 88 9a ee 8b 1a ae d0 62 db 3a bb a3 ce ab 6c db 2e b2 ee 93 09 9c 59 0c 80 93 40 63 61 63 3a 9c 8f 3c ed 70 b9 b4 20 22 61 f3 18 35 c8 7c 99 3e a9 10 8c 46 ce 83 71 5a e7 ba ce 8d 35 ba 33 68 b0 74 ee 32 ec 70 34 fa 29 49 ae c9 11 b2 5d 73 e8 99 37 9c db cf 01 63 7a 5c ac a7 43 9a 00 23 01 f3 00 Data Ascii: \$B!^g\|AyY!1@1Mh(;riL]2THfDX9?UN,[h;Z-TqLOSn]]#'}T7iYp\|Zsdb:l.Y@cac:<p "a5\|>FqZ53ht2p4)I]s7cz\C#
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 27 79 9e e9 32 56 25 79 f8 de 17 66 e5 7f 03 8f 9f e7 e7 bb 99 35 58 35 d2 74 f0 4a c5 af 1f d9 c7 3f 1e fd 46 3b f2 fb b0 8e a7 ee 7a 6b 70 71 10 dd 88 49 88 44 9c 5c fb 4b 83 e9 fc 8f 4e bb ea a5 6a a4 61 55 1b 65 db 86 b6 fc 9c b1 f9 5e 71 b2 af 43 aa db 93 a7 3c 9b b0 a6 be 54 fb 28 15 a2 cd 59 f4 45 88 5c 3a 29 38 90 90 38 21 74 85 b0 79 dd 9e f9 35 e4 32 f5 e9 af 45 1d 16 84 6b c7 65 2c 30 64 68 a8 f2 78 8c 95 d4 fa 0a 22 05 94 27 95 d0 bd 03 9b 6e 7b 7e 48 86 ff 00 59 e3 ee ce 74 79 15 f0 b3 b7 5f 05 ad 86 c8 be 54 6d 40 71 9f 3e 7f 6b 86 5d bd 29 b7 3f 46 aa cb 1e 75 ed d0 2a a8 67 3b f7 cf ad 85 f6 76 e0 ae c5 c3 f3 8f 4f c3 d1 f3 b4 64 3a 50 d3 73 76 77 cb 2d 3c cf 2d eb e0 97 54 eb a7 5d 56 eb d5 89 91 b0 b7 0f bd 64 d3 3e bd 27 cd ed 54 64 ea Data Ascii: 'y2V%yf5X5tJ?F;zkpqID\KNjaUe^qC<T(YE\:)88!ty52Eke,0dhx"'n{~HYty_Tm@q>k])?Fu*g;vOd:Psvw-<-T]Vd>'Td
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 4d 9f 43 35 f6 75 35 f3 f9 9e 7d 3c cd 9f ba 3c 10 63 e3 d4 f5 9e 35 a7 37 0b 32 52 b4 a8 91 a2 4e a3 51 59 a3 d9 1a ba bb 05 c6 32 57 72 37 25 a9 17 25 83 63 0a ad 36 6f e8 8c 86 ad b0 eb 46 ee 2b e4 70 4c 90 03 63 63 da 87 8d 29 db c8 e1 6d 54 fc 45 c7 59 5d ba 18 57 5d 76 d6 e8 e9 64 a7 1a 96 c7 d4 3e 3c 4c 6a 68 7a 2b 62 de 58 ce 9e 95 bf 70 3e 51 5a 72 08 19 26 96 28 d5 7a 50 ff 00 52 c4 96 a0 ae df 19 9f c5 2b 1f 93 31 0f b0 ac b9 38 58 cb 3f fc d2 94 09 4e eb 62 c4 b1 38 1f fd 26 57 f3 bc c0 fc db 32 ff 00 c9 31 2f 34 de f2 da d2 c0 b6 0e 9b ad 59 33 bf c9 69 4e 17 79 03 04 41 dd 98 0d ee b1 4e 75 7c 2f 26 61 ff 00 8a 9e 9d 34 10 f6 83 73 d0 99 bb b0 8f c9 f4 5d 6c 6d dd 05 c1 d1 ac 0f 78 73 7d d5 3d 64 0f a7 d9 d4 c6 74 ac b1 6c 97 ae cd 15 ef d1 Data Ascii: MC5u5}<<c572RNQY2Wr7%%c6oF+pLcc)mTEY]W]vd><Ljhz+bXp>QZr&(zPR+18X?Nb8&W21/4Y3iNyANu\|/&a4s]lmxs}=dtl
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 34 a7 05 3e 37 b2 60 d9 f0 16 ab 19 80 09 d2 c2 71 7b 31 73 54 a8 58 b9 ab 6d a2 a9 7f e3 53 fa f4 d4 c8 a4 77 37 18 72 d3 4c 3f 6b 32 c2 26 42 ec ba 4a bd 8e 56 5e 0f 1b d4 3b 77 53 90 c7 b7 85 c8 27 56 c7 6b 6c c6 e3 d2 de 94 c9 bb b9 7f 53 0e ee 03 e5 5a f5 9a d3 26 ba 12 8a 46 3a da 56 b5 ac 59 80 ed 8b f1 36 62 e1 74 db 29 47 3b d9 d4 5a 53 b6 49 ac ad 40 91 5e 5b ed 44 b6 d0 2e 0a d5 e1 ba fd 49 d1 6b 57 ea 23 59 0d e7 d0 98 0c c8 01 96 5e ba af c5 0f f5 07 a5 e8 79 0b 05 aa 05 8a f2 d2 19 38 ca 18 11 c4 55 5f 33 5c ea 8d 62 e3 f3 43 c0 50 1e 61 de d7 d1 5a 1f 84 56 a0 5a 99 19 7e f6 18 cc b7 f0 f8 c8 99 a2 cc 46 2f ca c6 f2 17 c1 9f 89 dd f6 76 e0 00 f1 40 30 03 e5 d7 4b 17 6f 88 38 e3 fd 3a 9f 5b 2d cd e7 df 37 2f b3 8a 4a 9f 7e 61 f7 1d cb df 7e Data Ascii: 4>7`q{1sTXmSw7rL?k2&BJV^;wS'VklSZ&F:VY6bt)G;ZSI@^[D.IkW#Y^y8U_3\bCPaZVZ~F/v@0Ko8:[-7/J~a~
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: c4 67 c3 b8 66 50 ac 5b 1e e1 1a 2b 6d d0 04 6b 62 89 a8 ba 19 df aa 00 62 ba a5 62 4e 2b 59 6e a8 81 9e e1 3e b0 bd b6 b7 c3 fa 9a 8d 47 13 0f a2 27 e1 e2 54 b7 91 db 75 f6 ae 5d 90 cb 2b 17 cb 52 79 94 1e 5c 7b 2c 3a 8b 1e a8 86 a8 39 6a d7 21 fc 91 65 30 e1 b0 8f 0e 09 65 7f 17 5e b8 67 a8 d1 5b 4d cb 43 42 be 8a ae 06 a9 9c 1d 53 5b 94 9e 11 aa 70 0c 69 92 d4 43 72 f3 40 d5 53 ee 4f 9c 86 18 d4 38 40 12 9b a7 85 a2 a6 60 16 86 ea c6 a7 d7 55 63 b3 98 5a b9 52 64 23 fc 63 9a e2 c4 3f 4a c3 32 f3 c2 d2 6c b1 8b 71 4b bc ba 23 9f 11 dc 94 ba 74 4f ca de e8 94 4c 3a eb 01 d0 76 1f 03 ca 10 bf f8 4d d4 fe 55 b3 4b 7d d7 3a 6c d5 c1 5f 34 4a fb 8a 33 29 c3 3f 64 73 62 cf 0a c3 cb 94 41 29 cc 6b 86 87 54 43 4b dd 74 25 ec 22 17 9c e8 9e 00 04 c2 33 03 44 61 Data Ascii: gfP[+mkbbbN+Yn>G'Tu]+Ry\{,:9j!e0e^g[MCBS[piCr@SO8@`UcZRd#c?J2lqK#tOL:vMUK}:l_4J3)?dsbA)kTCKt%"3Da
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 08 e2 cc 66 51 86 27 e5 50 f0 54 a8 91 23 12 5d 0c b8 8b a5 b1 5b bb 5c bc b2 e7 73 97 f9 22 a9 4a c6 5c 19 7e 13 c3 2b c2 7a 9a a1 a6 e9 d3 2c ba 64 0d 32 f6 c1 7f 40 dc 1f 74 81 ad 5c 0a 1b 5a 23 f6 92 e0 da c5 4a 40 60 7b 54 08 ba 85 1c be 25 7b 8d 3d 2a 2b 8d 0a c6 ef e8 71 14 8b 31 95 29 f5 0d 7b 76 a6 1b 81 6d da 01 90 40 a6 8d 88 97 ec 48 e4 05 b8 0c 0e 88 11 70 17 2c bf 99 9b 1d 08 56 1a 6a 04 b5 de ca 39 24 29 45 23 4c 42 d5 9b ca a2 12 00 55 07 12 ff 00 7b 04 45 ad 09 73 09 ee 21 c5 0c af 19 cb c9 fa 33 3b 09 3f 05 db fb 7c 26 6b cd 25 ed c1 07 76 78 e9 89 c5 0d 9f 0c 6b 6d 7f cc 4b a4 9d 98 ac 36 c6 9f 38 fe 59 fd 44 ac b6 a4 08 ee 3b 6a 3f 7b 22 e8 52 83 92 b5 3e 6e e4 2f c3 fd 61 0a 99 44 e0 90 ec 42 a9 58 12 69 49 ba d2 ef 99 47 18 6b fe cf Data Ascii: fQ'PT#][\s"J\~+z,d2@t\Z#J@`{T%{=*+q1){vm@Hp,Vj9$)E#LBU{Es!3;?\|&k%vxkmK68YD;j?{"R>n/aDBXiIGk
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 0a 44 a3 f1 02 45 8d 8b 8b 47 3e d2 3d 61 ba fa 48 a4 f3 62 2a 7e 25 05 df eb 13 16 6c 11 f6 cc 00 8c 14 df dc 29 51 5b 3a 48 48 2d 9b d4 37 24 db c3 ea 02 bc 75 96 a1 0c 7b db 03 04 05 3a 2a 0c 37 15 e6 5e 68 8a 71 08 ea da 33 51 1e 58 64 62 04 2a 32 50 77 16 62 a8 be 11 90 c8 db f0 10 8b 11 ba 80 01 42 a2 df 05 98 cf d7 73 91 9d 74 3f b9 c9 1e d7 4c 4e bb aa 62 83 ec 94 d1 a0 fe fd ff 00 32 f8 91 a1 e8 65 c5 c8 4b dd 32 c3 88 a3 8b e1 48 d0 68 8b 39 75 73 12 db 74 2d a6 2d 04 98 06 29 38 e3 12 ad 66 94 ae ec a1 2c 45 4f cb 89 75 dc a7 49 69 7f a4 45 5b 4b 12 44 aa 46 33 11 80 21 06 25 2f 32 a2 15 e5 83 79 60 95 1f 2c a5 d9 1d b0 ce 93 d6 2d a6 1a 8e bf 50 73 2e 83 28 9f 24 1a ab 96 2a 9d 1f b8 cc 56 0b 2e af 6c 62 39 91 57 a4 4d c2 84 fb ba ff 00 21 66 Data Ascii: DEG>=aHb~%l)Q[:HH-7$u{:7^hq3QXdb2PwbBst?LNb2eK2Hh9ust--)8f,EOuIiE[KDF3!%/2y`,-Ps.($V.lb9WM!f
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 46 fd 28 c4 1a a7 80 2b 71 5e 0b e7 a5 18 24 fd 93 5e 0b f9 a9 a6 81 c7 91 a3 11 a2 08 a3 9a c9 ac 9a 86 fe 58 c6 3a 8a 6b c9 4b 64 31 15 6b 79 e2 7a af 80 7d 3c d0 f4 48 06 bc 35 27 38 a0 30 29 a3 56 39 22 82 28 39 c5 62 b6 8a 2a a7 a8 af 05 31 d2 9e d6 32 38 5a 9a d8 a9 e9 46 33 45 48 ac 50 15 10 25 86 2a 3c 94 5c f7 63 d2 f3 ac fd a6 29 a2 46 ea 29 ed 23 61 d2 9e c1 4f b2 68 d8 c9 9a 5b 07 23 93 56 f6 9e 19 cb 0c d0 1e 9e 7b c1 f4 ee 67 9e 3b 88 11 53 ea d9 1c bc 98 dd b4 af 41 8f 8d 36 a7 ac 00 36 da e7 da fe ec f9 4a 10 7f f5 a5 d4 f5 72 a5 be 8a 0e 23 89 8a ed 2a 49 6c ee 03 3e 62 9a f7 54 59 64 1b 01 45 b9 8e 3f bb 3e c3 2e e2 d4 97 ba b0 92 14 96 00 3d 66 0e ea a4 a9 01 72 18 77 b1 c0 e0 53 c9 3e 78 5a 84 c8 7d a1 ff 00 45 21 65 47 2a b9 60 a4 81 Data Ascii: F(+q^$^X:kKd1kyz}<H5'80)V9"(9b128ZF3EHP%<\c)F)#aOh[#V{g;SA66Jr#Il>bTYdE?>.=frwS>xZ}E!eG`
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 18 30 60 ca 2b b6 1a 26 ab ab 4f 68 2d 21 56 8e 24 39 25 c2 f2 d5 d9 9b 4b cb 2d 22 1b 5b b8 c2 49 1b 30 18 20 f0 4e 6b b6 3a 36 a9 ab 35 9a 5a 42 ac 91 06 2c 4b 05 e5 ab 45 b2 d5 f4 fe ce cb 68 d6 ea 6e 57 78 89 77 8c 1d f5 a1 a5 ec 5a 65 b4 37 b1 84 9a 25 d8 70 43 02 17 a1 ae d1 76 69 75 09 ed af 6d 80 17 31 c8 9b c7 40 ea 0d 6b 7a 45 be b1 66 d6 f2 92 39 dc 8e 3a ab 57 67 ac f5 4d 16 09 6c ae 2d 8c d0 87 2f 14 b1 10 7a f5 04 1a d5 3b 39 a8 6b da ba 5c ce a2 d6 d9 14 22 82 43 48 40 f8 0a bd 4d 58 ea ba 69 82 d8 3d 9c 19 2e 4b 80 49 61 8c 81 f0 ae d4 58 dd df e9 12 5a da c2 af 24 8e bd 58 2e 00 39 ae c8 e8 ba ee 91 79 28 b8 81 7e 8f 32 e1 88 70 70 c3 a1 ad 6b b2 fa f5 fe b5 73 78 96 e9 b1 a5 05 7e b0 7b 2b 5a cb 76 8a ea d4 db 58 d9 08 b7 8d af 2b 4a b9 Data Ascii: 0`+&Oh-!V$9%K-"[I0 Nk:65ZB,KEhnWxwZe7%pCvium1@kzEf9:WgMl-/z;9k\"CH@MXi=.KIaXZ$X.9y(~2ppksx~{+ZvX+J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49843	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	615	OUT	GET /movies/12328652996-poster-Carnage-for-Christmas.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:59 UTC	930	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:59 GMT Content-Type: image/jpeg Content-Length: 25978 Connection: close Last-Modified: Mon, 16 Dec 2024 04:36:24 GMT ETag: "657a-6295bb9215d50" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2032 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6cZs%2FEJzXxvm6RGq%2B5mPZF6b%2B%2FHT40Po43UxfY4dc4wju%2FBjYC%2Fiow%2FuluFgUwkaoPfzGN1VaLMvXvpDshdvODfJT67pRvYJK%2B6IsuWWvf%2FdA8Szt2%2B57PHsoURdYts%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c728dc14263-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2108&min_rtt=2096&rtt_var=810&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1193&delivery_rate=1330296&cwnd=247&unsent_bytes=0&cid=fc379ece107d060a&ts=449&x=0"
2024-12-17 10:51:59 UTC	439	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 80 01 40 40 14 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""J@@
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 05 10 05 10 99 5a 4f a6 f2 98 56 cd 5b 99 98 18 fb dc 4d 5f db cb 81 1c fe a9 6b 7b 3c db e6 68 8c cd 76 76 29 1e d9 f4 d2 5d 70 b6 8a e6 34 d5 a9 b0 00 00 04 fa 67 63 9e 4c 6b d7 1e 32 ee 29 2e 6f 33 1e 5a 3d ba ee 22 6b eb d5 22 3c dd 35 af 73 a6 be 7f 9d 22 4a 2d ad 2e 2b 22 99 da 5a f5 28 7a 94 ac d3 58 b6 bf 32 44 80 48 ad 6f 72 c5 b4 16 f5 60 4f 3c 4b e3 a8 cf 2a a8 87 e2 bc 26 b3 5e 85 8a d8 d3 1e 53 cc cb 73 32 4f 40 b5 e4 44 79 64 42 a2 25 b4 94 8e d3 55 6b 72 28 f4 56 4d 6b 6b 1b 55 4c 48 cb d6 8d a7 03 f1 c7 75 5c ab 8b 8b 5b 39 36 81 7d 3b 45 d5 29 d5 73 9b 3b bf 18 e7 2d 7f 51 b5 b4 13 6f 14 ac 5a 45 6e ef 74 88 c2 45 62 da ed cc f4 4d a6 6e 46 ba 0c e6 92 ed 84 e3 87 99 9f 9f 45 cc 72 e7 34 5a d3 2a fb 5f 84 bd 33 3a b9 db cd f3 f5 a4 ca 67 Data Ascii: ZOV[M_k{<hvv)]p4gcLk2).o3Z="k"<5s"J-.+"Z(zX2DHor`O<K&^Ss2O@DydB%Ukr(VMkkULHu\[96};E)s;-QoZEntEbMnFEr4Z_3:g
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: c3 f5 34 3d df 17 79 c5 f6 50 f4 e2 a1 ec f9 c0 76 22 4d 73 89 6b b5 36 41 40 04 14 41 40 41 40 e9 08 91 0a 39 1a f2 68 f8 be 96 bb a7 e3 fb cf df a9 e8 f2 79 9a a0 b1 09 32 82 80 00 00 00 00 80 02 80 00 ed 75 ed 6b ce 4f a0 cd f6 fc c5 96 3e 9c 1d 7c f4 47 13 54 14 40 14 41 40 40 14 04 14 40 00 14 58 99 54 e9 93 4e b9 14 e8 a3 ea f0 ad b9 fd 78 9a 71 b7 6c 9a 9c f9 9a 80 20 a0 20 a0 00 00 02 00 a0 03 f5 dd ea eb d4 5d c8 d2 b3 6f 32 cb 1f 4d 48 97 e3 6a d9 f1 34 41 40 00 00 00 40 00 00 00 02 5d 3a 91 5e e2 ee d7 7a dd bc db 0c 7d 07 eb bc 0d 7c f4 9a b1 6c 80 00 00 00 00 00 00 00 00 2c 32 ef 8f 7e 77 e9 b7 71 a5 6e de 74 8a 6f 6d 87 b1 53 d1 e3 a8 c5 b1 e5 00 00 00 00 00 00 00 00 00 00 a7 51 6e 26 aa 68 38 fe 8a b7 a3 cb e1 46 ad 93 16 c4 00 00 00 00 00 Data Ascii: 4=yPv"Msk6A@A@A@9hy2ukO>\|GT@A@@@XTNxql ]o2MHj4A@@]:^z}\|l,2~wqntomSQn&h8F
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: bc 9a 4b a3 b4 c4 6a e3 73 76 59 5f 1f c5 b7 6d a0 db d9 2f 41 66 bc a3 55 71 a2 fa ad 6f 79 f2 cf 18 8c 9e 3e 76 fb 2d ed f4 0d 7b 42 db 41 e9 ae 66 86 e6 63 25 36 f0 f9 9c a4 6d 16 78 5d b9 e4 55 9b 2c 46 31 1b 6e ba 31 94 f0 18 6c c5 5c 9c e1 c6 03 78 63 be ae e0 96 67 6c 65 6a 54 ba fc de d1 44 26 9a ac e3 54 b4 59 1c 3e 0b 31 98 95 e6 33 ae a1 5f 56 29 be d6 d9 ca ac ff 00 a4 f1 39 4b c1 91 c6 38 9a eb 0d 16 58 e7 57 6b 4a 2a 6b cb 32 bc 42 42 cb 9d 95 f5 97 3d 55 8d 67 ae 37 15 89 a3 6b 2f 4f 31 b5 2a 3a 2c db c0 54 ca e4 b7 08 7a 3d 9f 94 a8 d7 6d 5c 45 01 c5 e0 b6 71 1d 8b 03 b8 9b 8c c9 95 8b 21 6b 7b 17 fd 47 6b 47 87 6c d6 49 5b bd b8 ec 2d 17 ad e4 31 d6 ad 67 69 4d db fb a3 24 f0 b8 9c bd 08 db 4e dc 38 3e f6 77 8a 82 bc 25 92 76 12 fa d6 1b Data Ascii: KjsvY_m/AfUqoy>v-{BAfc%6mx]U,F1n1l\xcglejTD&TY>13_V)9K8XWkJk2BB=Ug7k/O1:,Tz=m\Eq!k{GkGlI[-1giM$N8>w%v
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: df 01 07 61 e4 f9 34 e9 2b b7 a4 90 e5 c2 ab 44 22 80 4d 85 f2 7c a1 7d 9d f1 b8 39 c1 1c fc 8e 48 d9 4a f6 97 92 38 f8 6e 72 c5 83 bb 20 04 ec a4 d3 ae da 8a 07 85 a9 40 d1 97 8d db 3f 33 78 53 78 68 86 1d 6e 76 ea 8b 83 9c 51 75 72 85 75 6e 96 6e 77 4e 9d ef d9 04 d9 48 d8 14 e1 69 9e 44 d3 7f 01 ce a4 14 64 fa 22 85 f0 bc c5 39 db d0 5d c2 d5 2c ce 7e ce 2a 07 b3 b1 25 ab 2e d9 30 d1 a2 89 a4 25 d1 e6 56 1e bf 75 5b a6 b6 b7 4f b5 fb a2 0d ec 9a ef 75 77 f8 4b 94 9c a6 95 8f 8f b0 79 78 0b 25 bf 99 c5 2f 44 e2 29 08 9b ca 3e 65 a0 a1 b3 69 70 8b 41 dc 2d 4e a5 a6 f9 40 80 b6 4d 52 7c aa ec 2b de 91 08 d2 e3 f0 3b 84 d5 db d5 1d fb 28 62 32 1d 82 66 0b 64 68 01 e1 65 c6 22 79 68 37 49 cd 35 af d1 1d 2e b2 98 d4 e6 13 bd a6 8d f7 e9 41 3f 84 1c 16 c5 b5 Data Ascii: a4+D"M\|}9HJ8nr @?3xSxhnvQurunnwNHiDd"9],~*%.0%Vu[OuwKyx%/D)>eipA-N@MR\|+;(b2fdhe"yh7I5.A?
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 40 58 12 b6 09 bb 8e 43 c5 dc f3 4c 8d 07 e6 4b fe 00 7e ea 48 b4 ff 00 76 40 3f 60 bf a2 6e ee 76 a5 26 50 c6 fe db 6a d7 de 59 3f ec b0 a7 c8 73 7b a7 cc 3f f6 8e ba b6 af b5 69 d9 ed 21 09 9a ee 16 46 96 ca 1c bc 63 6c 80 7f 44 13 ae f7 e8 1c 49 a0 87 e3 73 03 93 85 05 1d b8 d2 74 2e 6e ee 0a 27 08 df 64 5a c7 ed b9 81 d1 f0 a7 7c a7 66 27 78 7c b3 39 1c 38 70 99 dd 76 e4 2c 9b d5 e6 3b 95 7b d2 32 fd 86 46 0f f1 23 74 d7 07 0b 0a 91 89 ab 2f 1c e9 d9 c3 f9 59 6f ee b5 af 27 7e 14 5a 4b fc ca 59 7b 8f 2e 4e 3b 26 36 b7 f8 58 90 89 5d db ba 27 85 f6 4c b2 69 dc 2f b4 3b 76 ed ff 00 85 e1 99 c2 23 db 7f 0b 53 4f 4f 14 95 85 a2 31 ca 77 87 bb ec e6 5f 54 c1 6f 0a 5c 66 ca eb 77 14 a7 78 c1 88 68 e1 7d f3 1d 7c aa 4c d9 9e 6f 52 73 89 e5 6a 37 ba 6f 42 2f Data Ascii: @XCLK~Hv@?`nv&PjY?s{?i!FclDIst.n'dZ\|f'x\|98pv,;{2F#t/Yo'~ZKY{.N;&6X]'Li/;v#SOO1w_To\fwxh}\|LoRsj7oB/
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 14 8d 6d 3e 59 45 6d a1 17 d8 b5 7e 54 31 4d a4 45 7a 92 c9 fc 76 2d 38 ad ad f9 16 d5 f6 46 09 15 fa 39 32 51 be 88 e8 af 24 f1 12 19 9a 1c 93 c1 e9 b7 d1 ff 00 1d 67 d9 56 57 e1 be 8d 35 fe 41 e9 23 4d 54 9f e4 b6 69 ff 00 7d 96 35 1f e4 31 db 46 92 f9 6d 3f ef f8 f2 74 5e da 6b e4 f6 d5 ed 09 fe 33 6a e8 aa db 47 a6 f6 d6 fe a4 72 bf 1a 7a 7c b2 88 c6 89 2a 34 3f a6 d3 57 1a 34 5e cf f1 d2 ad d2 e3 a9 45 8c 8f 5f 93 ab 1c a6 88 46 bb ff 00 a8 ff c4 00 40 10 00 01 04 00 04 04 03 05 05 05 07 04 03 00 00 00 01 00 02 03 11 04 12 21 31 13 22 41 51 32 61 71 05 10 23 42 81 14 20 52 91 b1 30 33 40 a1 c1 15 43 62 d1 e1 f0 f1 24 50 72 a2 54 70 d2 ff da 00 08 01 01 00 06 3f 02 ff 00 e9 71 68 70 b7 1b da dc 11 e4 8c 83 1d 86 8a 50 6b 85 29 a4 63 9d 8e 8d e3 70 e1 Data Ascii: m>YEm~T1MEzv-8F92Q$gVW5A#MTi}51Fm?t^k3jGrz\|*4?W4^E_F@!1"AQ2aq#B R03@Cb$PrTp?qhpPk)cp
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: ac 85 7c 48 dc c2 d7 16 1d 34 be de e1 26 0e 0e 03 00 a2 d2 ec da a7 c6 58 d2 e7 3a f8 87 a7 92 1c 58 c5 f7 0b 91 de 3d 96 46 44 ca cd 64 91 a9 1e a8 98 a3 7f 1a bc 27 64 e9 a4 96 cb ce 62 87 09 a8 f1 1d aa 39 01 77 a2 ca f6 96 bb b1 4f 9a 5c 3f 0e 26 0b 2e 7b 80 52 32 09 23 69 60 b3 9d 1c 4c 98 86 be 88 19 5a d4 ec 46 22 47 47 00 34 32 ee 55 4d 89 0f 23 bc b7 fa 2f 66 c7 ec e8 60 93 0f 23 5d 9f af eb e8 9b 0f d9 2e 42 dc df 0d a0 05 c0 10 3e 23 9c 1d ef 45 19 af 0e 9e ab 2b 47 5e 9d 91 cb 44 1f 95 6a 73 15 98 78 02 fe 8b 36 51 5d d7 d9 df 27 c2 07 36 57 77 55 a7 d1 4e 1b 88 e0 59 f8 42 51 e2 f5 21 3c 68 ec 8e ac cd 75 82 b8 78 76 f1 64 77 46 f4 f5 5f bb 63 3a 0c cf 0a 36 e2 44 2e 2f ba 0d 3d 14 58 93 36 5c fd 1a cd be ab 83 ac 8c c8 1f 6f 3a 94 31 18 a8 Data Ascii: \|H4&X:X=FDd'db9wO\?&.{R2#i`LZF"GG42UM#/f`#].B>#E+G^Djsx6Q]'6WwUNYBQ!<huxvdwF_c:6D./=X6\o:1
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 29 ae 8b da 38 99 4d bd e5 b6 7f 35 ed 1c b0 36 46 4b 3b 88 b3 4b 04 1d c0 c9 3e 8e 66 b9 af 2d e8 b0 cd ed 17 f5 41 fd dc f7 7f bf c9 45 10 de 57 80 bd 92 c9 05 c5 1c 9c 47 0f 21 4b 07 07 b3 5a d9 67 97 12 d7 b9 e1 9b 6b 67 55 ec b0 47 c2 6c 84 c8 7b 0d 0a 81 98 1c 43 9a 1a c2 5c 62 7f ea 9b 84 c6 63 07 19 f0 e5 76 85 db ac c6 1e 33 b6 cd c0 ff 00 34 59 80 c2 bd a6 b9 4b e8 01 f4 5c 36 82 e7 93 42 ba a7 45 3b 1c c7 b7 76 95 14 01 ed 63 62 24 81 96 b7 f3 5f 10 1f a2 21 ad 07 e8 87 ff 00 27 da 1f fa c4 3f cd 35 f1 bd ec 91 86 da e0 b0 dc 4d 5d 24 ed 24 f7 d5 7b 34 b3 c4 d7 97 8b ee 29 32 f0 cc a6 7e f0 33 5c cd 1a 91 e8 b1 58 a8 60 e1 0b 6b 2c ee ea ef f9 a7 4d 03 88 90 cf 6d 23 d5 61 61 6e f2 e2 00 fd 53 25 7c 4e 78 27 28 0d 58 ce 25 66 e3 17 d7 fe 5f ec Data Ascii: )8M56FK;K>f-AEWG!KZgkgUGl{C\bcv34YK\6BE;vcb$_!'?5M]$${4)2~3\X`k,Mm#aanS%\|Nx'(X%f_
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: ab e2 48 d6 fa 35 73 3c bf d5 72 36 89 e8 57 89 67 3c c2 f6 ea b4 5c cd 23 dc d3 e6 8b 41 f9 54 71 3e 4e 0c 6e 3f bd 77 4f 34 e8 23 90 ca c0 ed 32 ec ef 35 0e 21 d9 32 4c 48 68 cd 67 f2 43 0f 09 6c 4c 6e 83 20 d5 3a 49 1c e7 3d db 97 7d fb 0a 38 a7 70 0c 67 84 34 50 0a da 41 5d 40 28 68 08 6f 74 0b 36 3d 95 33 4f 35 fd 4a e2 3b 99 c1 73 1e 63 a9 59 93 07 c8 5b aa d3 df e2 60 f5 52 cd c4 60 e0 37 98 1e ba f4 50 38 ce 78 a5 dc cc ad 9b ea 86 27 0e 72 bd a7 94 d6 cb 31 37 7b 95 94 78 47 ec 8b 49 d4 ec 55 3a b2 aa 35 47 fc 2b 23 f6 3e f0 df 9a f6 45 e7 c5 ba ae 86 97 36 d5 49 b9 76 1a 2f 09 5e 22 b5 d5 03 10 db 75 88 6c f1 bd f3 11 f0 88 77 80 f9 a8 22 c2 c0 21 82 06 d0 1d 7c f5 5a 7e cf 44 d1 77 6b 9c fe 68 d3 be a5 73 aa 66 88 5a 7f a2 0e 2d be c1 00 ed 13 Data Ascii: H5s<r6Wg<\#ATq>Nn?wO4#25!2LHhgClLn :I=}8pg4PA]@(hot6=3O5J;scY[`R`7P8x'r17{xGIU:5G+#>E6Iv/^"ulw"!\|Z~DwkhsfZ-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49844	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	599	OUT	GET /movies/12315497092-poster-Don-Q.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:51:59 UTC	922	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:59 GMT Content-Type: image/jpeg Content-Length: 20738 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:52 GMT ETag: "5102-6295bc90bc26d" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3374 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rP2iZ88ooCO1FfG2bCQ%2BWhJ5jFpc2LfM%2FWmUIdpcmbGp7C3qdcp9hPdowr%2F%2BUElv2TesQB3cvs4TCXEQMOeMj7gEhfCyJaIIiss4Jp%2B%2FsRABsu329WEfKikNKaBFf50%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c728e7215bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1459&rtt_var=583&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1177&delivery_rate=1822721&cwnd=113&unsent_bytes=0&cid=030b27df9552a670&ts=450&x=0"
2024-12-17 10:51:59 UTC	447	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e7 39 fe dd 0d 81 d0 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""J9
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 72 e8 67 ab cc fd 27 56 ad b2 42 b9 5e a4 3e 9f 99 ce ea 79 3c df 37 f4 9d e9 12 f4 5f 39 c2 e7 fa 1b 7a 0e 7e 2e 77 a1 b7 8e ed 75 7a 8e 5f 3f ac e4 f3 7c ff 00 d0 76 7b de 07 1f 23 5e 9d 8c 79 69 ed b2 af 46 ce 0b 6f 57 d3 7c bf 12 8d f6 e5 ea ba ed 35 ee e1 cd c1 f7 3a 1c ef 47 52 15 ba f4 da aa be cf 8d ca d4 c9 9b 98 ea 6e d1 cd 56 ae 5c de 7d e8 3a dd 77 27 0d ca 2b e5 3a db fa 5e 66 12 23 cc f4 ba 1d 97 1f 99 c0 f7 ba 9a 39 e8 ec b9 98 30 bb 7a 3c e7 77 47 bb e1 e2 e8 f9 d9 79 7e a6 be a3 99 92 29 bf 31 f4 bd 3a f6 5c 85 6a bd 33 57 0d 2c d9 e3 94 21 95 33 46 fc dd 36 e7 5f 4c f0 bb 57 2e 6b 94 c0 65 a7 0f 74 ee d1 96 f5 16 e7 e8 86 6e 9b 35 32 c6 d3 58 1a 65 2c 2f d0 cf 8a f5 35 6f 62 57 68 a7 2f 54 f8 5e df 46 45 3b 15 e8 40 c1 14 ab ad 3c b6 e1 Data Ascii: rg'VB^>y<7_9z~.wuz_?\|v{#^yiFoW\|5:GRnV\}:w'+:^f#90z<wGy~)1:\j3W,!3F6_LW.ketn52Xe,/5obWh/T^FE;@<
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: db ac 0d 7c da e1 50 93 34 91 22 01 87 0b 9d 0e 31 94 52 6c 39 aa d0 87 22 d3 72 9e 98 ca 02 e2 ce 22 47 42 ad ae 37 52 60 43 cf d9 e5 b6 a7 93 9d 92 8c 71 2b 05 d6 80 c1 87 3e 7d 41 24 e3 40 81 0d 29 33 27 8e ab 74 f4 c1 d7 1c a0 e2 61 6a 51 d3 71 a7 55 6b b9 b1 59 92 ce 8e 4e 3a 95 70 38 5d 2d 77 55 bf 23 88 81 d4 a4 ab 48 34 e3 24 38 d0 d8 19 93 43 5d ca 3a 61 28 0b 8b 09 d9 af 9b ac e0 04 33 f6 79 9c bd 1c d9 44 c9 c0 c9 a9 d7 2c 67 52 fc 89 c1 c1 29 cd 56 91 12 19 a6 98 20 cc 43 9a 1a 6d d3 d3 07 04 08 6e 1a d9 fa 89 82 21 15 4b f9 39 1a fc f0 4a 02 13 53 b5 c7 15 b9 19 c1 c1 29 1c 2f 43 48 4d b0 98 05 c1 c9 4f 5e cb 35 ef 40 ea 44 a4 83 56 8e 9b 38 c1 2a 2b cf 3c 72 a2 9d fc d8 2c c0 f1 b8 d4 ec 43 6c 33 c9 05 98 98 09 5b 6a 9e 83 02 04 0c e3 4a ee Data Ascii: \|P4"1Rl9"r"GB7R`Cq+>}A$@)3'tajQqUkYN:p8]-wU#H4$8C]:a(3yD,gR)V Cmn!K9JS)/CHMO^5@DV8*+<r,Cl3[jJ
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: f8 8d bb d3 2a fd af 10 b1 69 ed 86 6d 42 e6 95 3b 5f 87 b8 be 32 05 7e 50 1b 63 2d 92 6b 24 53 bf 83 bd ac 97 52 66 e7 47 f7 4f c5 db 96 7a e7 53 3b 2e f2 98 36 22 4a 38 ce 98 ef ea da dd f9 ab 55 df 85 7a 17 c7 a5 8e 27 c4 12 b9 ae b8 e1 b2 26 16 bb 89 e9 76 e4 71 95 3f c5 c3 2c c6 1c 0f 7c 2f 92 d3 7b 6a 5a b4 e2 a6 93 45 ed 8b 52 fe 4a d2 29 04 d3 92 89 ef 04 9b 25 8a 46 3d 96 dd fd 4b af 3d 13 7c 33 f8 f9 8c 7a 67 f7 bc 0f de 95 ff 00 6d fc 92 42 6c c8 3f 0e b4 fe 7f f1 df d0 18 07 e2 99 f2 e6 3e 23 bc ee eb c0 e8 90 65 9b 76 bd db 1c b3 f9 b2 b0 33 a4 e0 eb 7a f3 b3 aa b8 66 29 9d cc fe 15 c1 c7 09 a1 a5 bb 18 9d c2 33 98 fd 92 e0 d4 5b 23 93 9f b0 73 41 4d c9 70 0e 29 ed c0 d1 bb eb 3a cb 89 d4 e3 91 a5 a3 ff 00 94 fd a2 72 e6 95 dd dc 60 ef 0f b0 Data Ascii: *imB;_2~Pc-k$SRfGOzS;.6"J8Uz'&vq?,\|/{jZERJ)%F=K=\|3zgmBl?>#ev3zf)3[#sAMp):r`
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 46 f5 8c 99 3b 03 34 91 90 04 f0 a2 a6 b7 4f 43 d8 24 1a 4a fa 38 93 f0 91 80 bc 86 26 61 23 21 79 0d 68 f4 e5 19 ec 54 90 b0 9d 82 18 56 92 9b 83 88 72 9f 18 6f 09 d1 31 c6 ca 6e 12 22 10 85 b1 9d b2 74 6c 79 b7 21 13 19 ed 4c 16 55 52 96 36 13 c2 f2 1a 54 f0 79 62 c2 8d fa 0a 32 6b 70 a4 c3 7d 32 71 94 7c 27 70 8f 2a 34 ee 54 7c a9 a7 11 a9 31 a4 f0 9b 88 70 e5 43 89 5a 83 8e c8 b3 64 45 20 76 51 f3 94 9c a0 53 bd 62 91 81 c1 47 1e 9d d4 7d 07 84 e7 12 a9 07 10 8b 89 41 84 a6 37 4a 7b 2d 51 0a 4f 54 85 0d 91 68 21 3e da b0 b2 5f a4 26 38 a7 36 d1 14 ea 52 c5 2b dc 34 9d 93 01 03 74 f6 5a 2d 21 35 d4 8e e8 0b 5e d5 7d 1a 42 d2 16 90 a8 74 52 9f f2 96 b5 53 b8 f8 5e 65 ec 9e bc 2d 96 e7 15 59 06 fa cb 91 a1 99 5a 42 73 55 d2 d4 4a 1f 73 15 62 52 85 86 ee Data Ascii: F;4OC$J8&a#!yhTVro1n"tly!LUR6Tyb2kp}2q\|'p*4T\|1pCZdE vQSbG}A7J{-QOTh!>_&86R+4tZ-!5^}BtRS^e-YZBsUJsbR
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 18 9c 48 d9 6a 72 24 f7 4d b0 9b 67 64 f8 1e 5b b0 51 e1 a5 d5 b8 5e 4b 90 84 a1 12 a6 b1 5f d8 b6 85 8a 98 34 53 0e eb 5f ca 3b 0b 44 d9 b3 94 67 d6 32 8a 83 6d 4d 26 b7 5f 0a f2 d8 a6 82 13 31 0d e0 e6 e7 86 f2 9f 8c 03 da 9f 33 df ca 82 dc da 2a d5 e5 61 19 98 d4 ec 79 be 13 f1 0f 77 74 64 46 ed 35 a5 c6 82 c4 e1 9d 1c 25 d9 e1 d8 e9 24 01 a9 d0 30 a6 45 a5 4f 81 27 78 d3 70 52 3b 9d 93 b0 2f fd a6 61 5f ab 70 be 99 94 99 03 18 6d 17 7c 22 f2 af e1 0c 2f 77 a1 18 02 9a 13 62 ac 82 75 f6 46 d3 a1 7b c5 27 30 83 ba ab e1 3a 27 37 dc 13 5a 5d c2 c3 e0 dd 7a 9c 8b 76 4e c0 46 57 f8 e8 d4 50 32 2f 6f 41 45 c0 72 8c cd ed ba 32 bc ff 00 48 bd 6e e4 19 5c af d2 d2 3a ed 10 0f 28 34 0e 17 28 35 a3 80 af 2b c8 67 26 22 36 77 47 11 23 fd bb 2a 03 77 6e 8b ce 40 Data Ascii: Hjr$Mgd[Q^K_4S_;Dg2mM&_13aywtdF5%$0EO'xpR;/a_pm\|"/wbuF{'0:'7Z]zvNFWP2/oAEr2Hn\:(4(5+g&"6wG#wn@
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: a5 e1 33 85 27 1d bf 84 07 ad 03 49 be de a9 09 b5 ba af b5 48 21 b2 90 20 a4 ee 11 ea bc 87 1d 4f e5 52 a5 59 bd 05 2f 6c a3 ca 68 d5 d6 46 ea 95 2a 54 b4 a7 f2 82 97 8e d9 41 b6 e4 05 75 ec bd 2a da b5 05 ad 6a 45 05 2f 1d ba b5 a7 4e 77 d0 7a e9 05 27 1d 56 ad 00 5c 68 2f 21 c9 b8 71 f2 b6 19 b8 a0 77 e8 77 1d 99 78 ec 03 5b a8 e6 bd 8f 4b b9 5f 28 66 ee 3b 32 f1 da 64 a4 72 81 bc e9 52 19 95 a5 69 54 a9 52 a5 4a 93 f8 55 d6 1a b4 20 d4 cf ac 99 b8 dd 3f 26 66 ee 16 fd 00 6f 93 79 c8 aa 54 a9 56 61 03 9b 79 c9 a6 93 8d e4 de 7a 29 56 61 6a 43 b4 0a 05 04 3a 5a 8e 55 91 e9 1c a3 d3 6a fa 5a e4 0a b5 63 36 a7 65 6a d6 cb 65 b2 b5 61 07 04 5e 16 a5 a9 5a 92 4d 2a 29 4b fe 3b 1b a6 37 ef a4 f1 93 90 55 95 d2 24 2a e8 0c 28 34 04 ed 8e dd 14 b4 95 a1 00 02 Data Ascii: 3'IH! ORY/lhFTAujE/Nwz'V\h/!qwwx[K_(f;2drRiTRJU ?&foyTVayz)VajC:ZUjZc6ejea^ZM)K;7U$(4
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 95 07 35 59 9e ef 68 1a b7 3b c9 58 b3 33 1e 5d 56 10 df fa bb da 37 03 c4 c5 2d 77 d3 45 8a 32 bb ea 31 8f e2 ba aa fa 90 0d 47 49 e4 ad 92 ed 98 b3 ef 1a 75 63 49 f3 dc db 9a ec b4 da 61 dd d9 36 54 70 d5 24 17 fd 91 a5 51 db 00 48 ea 55 66 81 00 3a da 30 f1 d3 2a d9 72 5d a7 b2 00 31 55 3e d3 f0 f0 51 c4 67 a9 6d 06 c6 ca 0c ee 49 54 8d 3a 93 8a 9e c9 72 a0 19 4f 37 27 bc 6c bd a7 82 69 ad 05 d1 13 cd 61 8c 94 f2 d5 90 b1 1f 1f 13 cd 5b ed a9 88 78 96 11 96 8c 3b 87 0e 8a 99 aa f2 03 6d 2a 94 ba 36 8b 81 a7 9a 75 47 cc ba e8 ad a5 03 71 7d 62 77 3d 0e 5a 29 9e 05 7d 34 79 6a 5f 73 0a 06 e4 f4 be 8a 50 9b 8b c3 c5 38 ee 7f d0 59 e8 12 8a 3b c0 82 81 6d 6b e6 ac c9 f9 8a d9 c2 2d 16 0b 3d 53 bc 8d cd b5 ce f6 11 8c b7 c7 7b d3 5f 25 90 d7 3b bc f0 b3 de Data Ascii: 5Yh;X3]V7-wE21GIucIa6Tp$QHUf:0r]1U>QgmIT:rO7'lia[x;m6uGq}bw=Z)}4yj_sP8Y;mk-=S{_%;
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 9d ab 0b 58 7c c0 10 45 99 5e 25 ef 5c ad 96 c7 42 dd 2c 81 d4 fa 1a 0b 5a 20 8d 02 f5 71 1d 59 f1 5f b8 56 33 aa 37 81 5c 0b 0b 5b 66 a2 bf a5 49 aa 56 ef bc 16 a6 9f 67 f5 cc 3d a5 66 a4 da 5c a3 64 0a d8 ec 8e 57 58 a4 bd c7 88 56 41 31 ff 00 20 7e a6 58 56 8f c0 65 33 27 b6 60 ad af 4a ff 00 e4 5d 9a 42 6d 75 cb c9 0a be 16 52 ee 78 96 5b 7c 13 9a fe 67 32 2b ed cc 3b 40 db 4d 97 bc a5 58 98 53 03 19 77 58 68 d8 ae 6a d6 3e 6c 5f e8 9f a8 85 c1 95 d8 ff 00 65 01 4b 55 df f7 02 3a 48 c8 bb 8f aa e5 c6 5e b7 dc 86 9e cc 34 e5 5a fb 98 89 7c 08 65 84 1e 58 c6 14 74 dc b6 2d 40 51 81 66 32 3e 2f 69 f9 4e f2 82 e2 3b e7 50 a1 53 fa 81 09 57 09 b7 a4 a8 05 ef 89 d8 cc dd ee 82 81 73 12 15 14 1f 2a 46 da 5b 4b 6c 63 a3 06 09 e8 aa 6c e0 7a 1c 4b f4 56 98 2f Data Ascii: X\|E^%\B,Z qY_V37\[fIVg=f\dWXVA1 ~XVe3'`J]BmuRx[\|g2+;@MXSwXhj>l_eKU:H^4Z\|eXt-@Qf2>/iN;PSWs*F[KlclzKV/
2024-12-17 10:51:59 UTC	1369	IN	Data Raw: 51 de 13 30 10 3b 5f 37 9a a2 ba b0 2c 90 a6 d2 bb a3 d5 94 3b 40 00 6d de 63 d8 75 83 76 d2 0f 90 d7 73 da 5b 1b ba 4a 9b d0 18 69 b0 df 2a 00 97 d0 cd ec 3e b5 77 d1 23 31 30 de a0 0e 33 73 8b 93 c3 36 de 58 a5 e5 e7 a4 5b ad e0 c7 8f 98 ce 40 39 75 0c 91 d9 48 fb 98 76 6c 1a 1c 5c b0 51 37 0a 31 dd 57 2b a9 d6 75 92 b6 3e f4 60 a2 b7 16 07 99 80 33 30 fb 1d 23 de b1 d6 5c 18 c3 bc ba 03 77 88 ba 0a ac c8 f6 02 d9 f2 65 46 e6 2b 77 f8 11 53 21 2c 6f d3 d8 e6 05 77 36 b5 bf 78 e7 71 f3 0a 82 59 18 89 c0 4b b8 99 a0 a6 0f 27 92 5b 6c 85 09 9b f6 da 6e 58 e0 a8 3e 2e 67 59 32 a0 86 60 86 9d d7 7d b8 5d bd 62 a7 e2 3e 79 f8 9e c6 f3 25 9d 26 9f 10 ca d5 1d 08 01 55 77 94 3c cf 28 46 eb 12 9b 8a 44 36 cf 1e 3b c1 8b 2b 8b 4f 9a 99 7e 18 db ff 00 90 b5 1b 86 Data Ascii: Q0;_7,;@mcuvs[Ji*>w#103s6X[@9uHvl\Q71W+u>`30#\weF+wS!,ow6xqYK'[lnX>.gY2`}]b>y%&Uw<(FD6;+O~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49847	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	607	OUT	GET /movies/12311450972-poster-Tokyo-Shaking.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:00 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 11104 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:40 GMT ETag: "2b60-6295bc85b9c46" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=McLsvHyi%2Ff72ijCKZxeVtVp0REKHXkZggSsgXaQlA9T7fvDCO1uyUovniSYaQTDhSI2EJXaRQ82HnLAKZ0RU%2B%2Bl1%2FQYw4ym8CnM98a7Jr1o937RDizemkgQbqUtQqyE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c745fc7728a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1820&min_rtt=1818&rtt_var=686&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1185&delivery_rate=1590413&cwnd=227&unsent_bytes=0&cid=073fc0f7dd5ae9da&ts=916&x=0"
2024-12-17 10:52:00 UTC	454	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 00 01 02 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 de f9 c4 66 dd 53 4b 91 7e 6f 97 4e f5 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwJ"5fSK~oN
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 84 f5 66 5d db 38 be 3c a4 ee fb dd 64 f8 db 8d c8 df 93 ea be 79 a8 a2 de 4a 08 c5 57 9f f4 dd 5f 25 b9 d1 ee be 9c 52 66 f4 fe 5f 0b 84 51 75 50 ce 4e 54 39 6e cb b7 d1 2d 8a 35 76 22 0c e5 d8 57 e0 ab 3b 33 08 ac 22 8a 95 a0 66 da 81 02 47 af f3 b2 83 0d cb f4 83 7c 44 7d 46 18 72 12 a5 cc 4e bc 28 5e c4 95 4a a7 b8 d3 2a a4 35 1b a7 e0 6c 7a 9f cb bb a6 2f 25 50 93 bc 77 a4 1c 16 49 53 d8 4e 06 23 92 fa 55 69 c2 cb 2d 68 98 1c e3 da 25 0a dc 75 6c 3e f7 bb a8 7b de f4 9e 1c 44 7e 65 42 02 a0 f3 7a 15 ab 45 42 56 7d 85 96 ad 36 ad ad df 82 58 b5 6e a7 cf 7e 73 d1 22 3c 1d e3 36 da b5 cf 92 ea 0a 75 b5 8a 46 c3 51 7a 6e f6 f5 3e 59 32 57 36 80 ed e2 d3 a1 e5 fa a9 42 57 bc ef 69 1f 7b de b9 e1 a4 83 66 57 62 91 4f 3d cc fb 50 ca a2 67 d6 69 38 5d a1 9c Data Ascii: f]8<dyJW_%Rf_QuPNT9n-5v"W;3"fG\|D}FrN(^J*5lz/%PwISN#Ui-h%ul>{D~eBzEBV}6Xn~s"<6uFQzn>Y2W6BWi{fWbO=Pgi8]
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 5f 81 b5 fb fa 76 f1 3e 40 07 3a fa 9c 3f 52 d8 1d 7a f3 18 ef f2 1f 3c c6 07 19 e7 85 b0 3e 79 67 98 ea 49 bc 56 fe c0 05 79 1e 76 31 22 47 66 ab 48 f1 d7 f2 92 08 d9 1b 49 b5 74 09 20 61 de 77 87 08 c2 b9 d6 75 8c 01 0c 7e 7e 3c 7a eb e8 7b c5 39 f1 9d f5 9d e7 90 c9 e7 08 36 57 04 70 17 32 34 71 7b 68 d1 81 89 54 33 c3 45 72 4a 3d 3c 31 32 26 a6 cf b9 17 d4 e1 cf fd cf 2c 2e 09 42 00 63 9f fb de 7c 11 fa 16 3d e0 c7 60 32 f5 9f 1c bd 3f 9e 56 9b a9 21 70 ee 9e 21 d5 81 c0 ea 85 4a b9 10 8f 63 5e e6 19 94 f6 33 ac 38 70 fd 19 80 c1 1a b3 00 a0 37 47 08 39 f2 4f e9 9d f7 84 74 0f 79 3b 74 b7 ed 95 92 69 5a 42 f5 9a 38 f5 c2 42 8a 96 09 af 59 98 cb 45 c2 ac de 38 d6 7f 2d 47 06 68 d8 34 7f 53 87 e9 e2 1b 3a 21 f9 f4 d6 06 fc 7a 7b b4 c3 e9 e6 d3 37 ba 9b Data Ascii: _v>@:?Rz<>ygIVyv1"GfHIt awu~~<z{96Wp24q{hT3ErJ=<12&,.Bc\|=`2?V!p!Jc^38p7G9Oty;tiZB8BYE8-Gh4S:!z{7
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: fe 49 a6 af c0 39 56 83 77 ae e7 10 87 37 ad 28 af 59 8c 91 d7 60 a1 a4 1e 05 81 2d 8d 87 3a c1 de 09 18 67 13 d8 c9 5f 69 f7 4d 8d 70 ae 7f 51 f9 17 f0 de 07 26 65 91 e4 97 c6 58 a7 42 79 66 b7 6f 63 75 0e ff 00 9f a2 5a e6 1c c6 a0 bf b5 dd 6e ed f2 cf 4f b5 fc aa d9 a5 54 51 5f 49 35 35 76 7c fe dc b4 d2 dd e4 92 2a 1d b4 68 9d 2b 03 d0 f1 18 5d 71 ba 38 c3 eb fa e6 91 bc 6e 03 de 49 f2 00 f9 03 02 fc f8 01 93 ce be f4 6e 85 ab 88 d8 45 18 ce 51 42 dd a7 a3 c7 76 82 c6 7a a5 cb b9 1e 8f 7f 55 9a 48 3d 41 d4 db be 65 e2 b7 d2 2d 7e b5 e3 85 a0 65 5f 67 c9 24 8b b2 60 cf 16 18 7b c3 e5 85 5f 07 b9 9a 9f 21 61 53 b5 68 bb 02 b9 ed 60 39 ed 15 3d 48 d9 63 55 09 64 d6 57 f1 7a 6a 04 49 27 52 6d 75 d1 62 6f b5 5e 79 eb 5f fd a2 a1 ff 00 1b 90 ed e9 eb 8e eb Data Ascii: I9Vw7(Y`-:g_iMpQ&eXByfocuZnOTQ_I55v\|*h+]q8nInEQBvzUH=Ae-~e_g$`{_!aSh`9=HcUdWzjI'Rmubo^y_
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 9e 5b cc f0 59 b4 b2 58 35 8c b1 0a 15 be da 29 22 10 4f b7 af f6 34 2f 38 79 5c 4d 52 4f 86 66 01 66 99 5a b5 62 1a 27 f1 19 60 42 59 a3 43 9c 08 24 50 21 76 c9 66 75 85 4d 87 9f 66 b2 c7 aa 8a a5 89 22 f6 58 b1 a6 32 6a ce 4a d7 95 a4 ab 13 47 6b 57 48 da bb 1d 43 5e d4 94 e1 7a cf 0c b0 b5 49 e4 51 3d f0 02 cf 59 44 d7 2a 34 70 5f 82 26 97 7b e2 8d ba c4 b7 35 83 04 56 c9 af 56 65 82 c5 42 60 3a c4 f2 8e 85 71 9a 30 6a d3 83 61 14 6c db 18 84 75 ef b4 83 77 b4 5b 51 53 50 b5 97 8d 76 8d 4e d0 c9 ac 4a a0 49 36 47 33 1c d3 57 f6 ac 38 5f 03 7e 08 c6 c6 4f f2 b6 56 24 58 99 d9 b1 89 ce fb c0 73 b2 ca b1 bb 65 38 3c 16 1e c1 85 df c6 c3 79 22 87 31 89 02 8a 36 e1 58 e3 da bd 60 39 64 ca d4 b9 35 b9 92 c9 fc d4 cb 7d b5 19 6c 34 f3 21 0f 63 5b 7e 16 5f 71 Data Ascii: [YX5)"O4/8y\MROffZb'`BYC$P!vfuMf"X2jJGkWHC^zIQ=YD*4p_&{5VVeB`:q0jaluw[QSPvNJI6G3W8_~OV$Xse8<y"16X`9d5}l4!c[~_q
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: c7 8b 50 32 9f 22 be b3 45 5f 0e 23 81 9f 21 34 3a da bf 95 a6 84 23 3f 13 10 6a fb 2a d2 de 5e c3 88 1d 3b 22 d0 c3 a1 09 5c d2 53 5d 06 9d 3d 76 ab 60 9c b3 34 d1 f6 8f 66 dd 4f 7a 9a 71 4b d7 69 d9 12 b4 ed 54 0a a0 01 fc 75 52 ad 4f 6e eb e8 e8 a8 f6 9b 43 b8 41 e0 aa 93 45 b4 70 95 38 1f 80 02 1b 54 8d ca d9 26 6a 6d a4 60 58 05 9f 31 d4 4a dc fd ab 2c e3 e0 b1 f7 7d a0 c4 03 f8 89 b5 f8 20 c0 3d 2f 6d 8e 15 14 16 63 ee 12 dd 63 82 10 b0 08 be 48 9c 81 f3 33 50 8a 79 cf d6 68 d5 bc b2 0f b9 84 19 eb ea b4 04 78 10 23 19 d9 f4 b1 21 6d 4a 50 e3 a8 0c e4 4d 1d 9a 7b ae 73 6b b0 3b c8 8d ad ed 3b 5f 4f 49 5c d6 a3 01 88 fd a3 99 5d 3d 99 6d d6 d6 96 00 d6 d8 46 18 e7 f9 b8 03 89 4e 81 3b 32 ab c3 e9 52 ed ed 61 4e a4 c5 63 c6 54 19 46 8a be cd aa f0 fa Data Ascii: P2"E_#!4:#?j*^;"\S]=v`4fOzqKiTuROnCAEp8T&jm`X1J,} =/mccH3Pyhx#!mJPM{sk;;_OI\]=mFN;2RaNcTF
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: f8 34 06 fe ce a2 bc f9 a1 ff 00 34 d3 36 ac 96 0a ea 11 14 61 46 4c d2 ea f5 3a dd 45 2f 4e 9f b9 02 b0 a4 75 2d 06 8e f4 5b ab ee 45 4c ae 01 0c a0 6d c3 09 fc 3f b3 bb 5b 5f a3 74 b7 7d 42 a2 a7 bb 9d 8f 55 96 77 8c 6b b3 73 e0 2e e2 a4 73 81 0a 8e b9 9c 43 0c 39 33 af ad 49 f2 75 f5 44 e9 13 e3 09 8e 1f c3 a7 a2 94 d3 d7 90 aa 49 f8 99 43 14 00 0b 54 9f 91 f4 69 74 dd 99 da 4f 45 2f a1 4b 0a aa af 2c 59 a5 2c e7 24 d6 84 9f 79 13 b3 7b 8a f3 b1 6d dd f3 22 33 bf 07 3d 22 e4 f3 1a 13 1b 99 9d de b2 7c 60 f8 0f 50 19 98 0e 7c 62 11 d4 75 99 53 cc e9 0a bd f5 ee 07 07 98 8a 2f af 25 80 1c fa 34 3f d5 a9 fd f7 9a 7f f7 49 fd d1 34 fd ff 00 01 d5 8a fc a3 ad 13 da 8c 00 eb 08 8c 7d 75 95 9f 35 1e a1 f4 2e 5b 99 9c f4 30 86 3e 02 5a f9 e5 51 8f d2 58 0b 92 Data Ascii: 446aFL:E/Nu-[ELm?[_t}BUwks.sC93IuDICTitOE/K,Y,$y{m"3="\|`P\|buS/%4?I4}u5.[0>ZQX
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 58 aa 52 96 ce e1 d2 2e fd 35 46 14 6d 15 7f 26 84 37 67 7d 1e 3f fd c1 f2 07 98 98 a7 4b 5a 88 8e 35 0b 5e ef d9 58 b5 d9 ac b7 6e fe 70 71 36 5a ec 41 f1 24 98 dd 71 93 88 07 bb 33 b8 37 f7 61 53 76 7a c6 63 da 2c 47 90 41 32 d6 da c7 de 65 7a 1d 31 5d ec 39 03 a2 03 12 ab 08 21 86 ce 3c 8c 64 3d 55 8a fd 0e 3d 1d 0c 46 5d 33 e1 e3 28 d3 74 b7 6c 5a 9a ac 70 63 15 43 c6 67 74 c0 80 1a 05 35 6e 23 d9 2d e5 2f d3 ec c6 d2 71 1d 0e 73 0a 9e 9b 7a cd d9 e7 19 11 ed bc 1c 60 05 f8 99 61 47 e8 71 1a c5 19 48 72 9d 78 30 84 e4 79 cd 11 27 c3 06 67 93 93 99 69 71 e5 88 54 43 cc d7 3b 8c 84 ad 47 d4 c2 2a 66 5f 9e 44 cd 7a e5 41 93 91 b3 98 bb b2 70 40 6b 09 cc ba f7 bb 7a a2 1c 7d 33 37 1e a4 92 61 38 f4 52 9b b9 ff 00 ac 36 12 32 2c fc 71 89 47 3d 4b 03 2d ad Data Ascii: XR.5Fm&7g}?KZ5^Xnpq6ZA$q37aSvzc,GA2ez1]9!<d=U=F]3(tlZpcCgt5n#-/qsz`aGqHrx0y'giqTC;G*f_DzAp@kz}37a8R62,qG=K-
2024-12-17 10:52:00 UTC	1067	IN	Data Raw: 3b 7a 50 f9 d0 0b 85 88 13 7d b8 58 80 1e 74 ea 45 e1 68 00 ed 98 9c 18 9e 34 2c 7e a0 a2 39 89 43 41 fd 42 a2 15 01 ee fe 26 33 51 b3 b8 ae 44 6c ce f6 a6 aa 01 ec 22 27 ef 80 50 95 36 47 2d 8d a9 97 8f b8 9c 8e 26 d3 1c b8 f1 18 70 67 b4 b7 cc 40 0b 50 8e a7 89 d9 c8 7c 2c c7 83 28 bb 89 d3 10 d6 5a 76 ff 00 30 a1 fb 80 47 0a ea 54 c0 0e 23 e6 61 6b 5f 32 84 27 15 4f d0 36 28 c0 00 60 31 d0 8a 8f 5e f0 2e 37 0b 15 c8 f2 4c 04 11 c1 86 33 50 9b d8 cc b9 99 5c 80 65 96 e5 9a 74 d6 41 95 08 52 a3 dd 0a 2d 92 1b 8a 13 da 8c 18 73 0f 22 6d 22 f9 b9 b4 d4 54 68 63 0f 74 e0 4c aa 4e 46 31 54 cc 4a 51 22 e4 53 f3 3f c4 55 46 47 de 36 91 e2 0c 7f 05 a6 36 05 07 e3 8d 09 a1 3b c2 ea a1 36 61 52 4c 10 e2 0c 6e 2e 25 06 37 88 ea db b8 11 8f 12 e8 2c 56 35 30 b1 b3 Data Ascii: ;zP}XtEh4,~9CAB&3QDl"'P6G-&pg@P\|,(Zv0GT#ak_2'O6(`1^.7L3P\etAR-s"m"ThctLNF1TJQ"S?UFG66;6aRLn.%7,V50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49846	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	602	OUT	GET /movies/1239411900-poster-Back-Home.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:00 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 16145 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:17 GMT ETag: "3f11-6295bc6f7024b" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cw5g0etRmbxJthh%2FM3hnnSbd5kyAug7xYFlpxvzlGQglsFi%2FDidaszJAT%2BXoXDpYQIsySJMWzHZirc6aui%2BUtSPeN7Y%2BZh8ubK7XUfyjX2ekaluZe7m8VgdampYRvmM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c745f85c346-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1484&rtt_var=572&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1180&delivery_rate=1888745&cwnd=181&unsent_bytes=0&cid=4bebdc1d016ddc59&ts=925&x=0"
2024-12-17 10:52:00 UTC	452	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 00 04 05 07 02 03 08 01 09 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 02 04 05 06 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 eb 94 95 64 a4 92 49 24 92 49 24 92 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}J"6dI$I$
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 56 00 be 91 4a ee 2b 3b e7 f7 40 c0 93 7d aa bb db cc ad a0 aa 66 5d e5 c7 85 23 e7 55 d9 ae a4 f0 64 b5 9b d5 4d 5e db 59 a5 6a 21 c2 9a 71 43 88 e7 f7 cf 7d c0 a2 5e 24 96 4b 1f 52 20 d5 0d b8 47 3e 28 ad 4a eb 6d b2 1f 9d 04 73 8c cf 42 0b e8 35 07 9e b7 5e ab e2 0e f2 6f 90 cd 2e 74 1b 66 e6 b4 58 6a 0c 86 ce e8 2c a7 55 dc 33 5e 4f c9 fd 4b c7 77 75 90 3e f9 e5 8d 7f ab c4 97 be 6c de ba d3 d7 8d 92 c1 24 b8 e6 52 1f 78 cc fa 27 2f 17 2d 33 8a a2 c9 c8 6d 0d 9b 90 47 fa 57 94 36 c9 fe c6 be 5a 41 bd 5f 91 d7 b5 10 93 d3 02 cf 4e df 6b d9 40 e8 3e 79 cc eb 9c a7 76 5d de 4a 15 1d b6 c7 6e e6 89 ef 79 11 26 36 98 fc b5 c9 84 97 be f7 8b dc 7d 48 82 03 76 23 2d 8b 64 53 66 99 6d 7d d3 1c c5 bf a1 f9 69 33 c1 a7 14 b7 6d 28 62 ca c2 ba e2 4d f4 74 64 90 Data Ascii: VJ+;@}f]#UdM^Yj!qC}^$KR G>(JmsB5^o.tfXj,U3^OKwu>l$Rx'/-3mGW6ZA_Nk@>yv]Jny&6}Hv#-dSfm}i3m(bMtd
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 03 03 02 04 05 04 03 01 01 00 00 01 02 03 00 04 05 11 12 06 13 21 14 22 31 32 41 10 20 23 51 07 15 33 42 61 30 34 40 52 24 36 43 35 71 ff da 00 08 01 01 00 01 0c 01 ff 00 84 40 2f f1 b6 ca 5b 62 d2 06 97 27 26 93 25 7d d3 a9 2f fe 09 95 d2 2e a1 16 dd 99 ed de 5a b3 eb 1f 52 ce 27 0a 91 d8 64 ed a7 b2 b7 98 cc 80 47 2c 72 8d a3 86 ff 00 8d 97 ea 7c 7e 0f 49 21 32 5c 65 73 17 d9 89 cc b7 53 93 42 8b 9e 21 69 2e 0a a0 4d f8 f5 24 f0 1f 09 85 ea 2b 8b 74 86 37 45 73 67 75 1d dc 41 d0 8f f8 bd 51 2c 56 cd 98 b3 7b 7d 5c fe 45 25 48 23 c1 b5 99 a4 d7 13 a9 7a 4b 20 d3 5b 28 91 b7 ff 00 17 2d 82 c6 e6 a3 e3 77 6f b6 cb f4 5e 4e c6 e8 c7 68 be aa 39 a2 92 09 1e 29 53 8b fe 36 af c6 68 59 5b 4d d2 ce ad 7e 7b 2e bd a1 f1 ff 00 0a 4b 88 62 60 b2 48 a9 57 9d 43 86 Data Ascii: !"12A #Q3Ba04@R$6C5q@/[b'&%}/.ZR'dG,r\|~I!2\esSB!i.M$+t7EsguAQ,V{}\E%H#zK [(-wo^Nh9)S6hY[M~{.Kb`HWC
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 1c 1b fb a9 47 be 73 4a b5 38 dc 64 6a ae ed 52 50 43 55 d5 bc b1 96 6a dd 1d 7e 40 0b 1d 0a b1 c0 dd 5e e8 ae 95 64 e9 3b ab 34 ee ba 2c 91 5d 63 6d 1a dd b8 a8 52 f0 c8 8c 47 13 5c a9 18 6c d4 e6 e2 d5 52 4b 78 c3 09 a5 17 10 cf 78 d2 8a 90 96 f6 7c 17 82 45 05 ca ee a4 e4 62 4d ad 41 8d 96 55 0e 57 55 63 69 6e c9 c0 a8 34 b8 e8 61 20 84 1c 32 16 f1 f6 ff 00 4d bc e3 31 17 d2 02 ed 10 4a 95 3d e3 74 35 e6 b8 d3 af b4 d3 a7 8f de a7 8c 1d fd aa ee d8 21 32 28 f6 c9 09 52 df 88 f3 58 9b 74 96 e7 94 87 db 6b 74 f7 24 f6 0f 05 c5 e5 26 86 61 04 e7 92 67 30 fd 89 e4 11 be a2 b8 81 e1 99 d3 c5 17 a5 91 b6 08 ae e4 d3 a4 3e e0 86 fe 76 96 e9 a4 0c bc 61 b6 12 00 91 b9 77 c5 e3 4d d3 cd cd b9 0b 68 44 5d eb 49 54 f2 f4 32 15 52 db 63 61 60 d1 7d 42 9a 2a 8e d9 Data Ascii: GsJ8djRPCUj~@^d;4,]cmRG\lRKxx\|EbMAUWUcin4a 2M1J=t5!2(RXtkt$&ag0>vawMhD]IT2Rca`}B*
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 01 51 46 11 46 d9 7f 6a 16 cb fb 57 a7 5f da 9a d5 4f da bd 20 1f 15 c7 b4 e1 2a f4 3f 30 ab 1f 23 71 6b 96 94 91 3c ea 89 26 36 4d f9 ba ac 4e 26 ca 69 78 4b 23 ca 1f a6 f1 0c a5 fd 2a f2 b3 b1 f4 52 8e df d2 9f 3b ac 84 36 93 da cd ea e2 47 8e 4c 75 bc 67 f4 a4 94 54 16 b1 ef 65 9c d1 3c 06 b7 ca 9d fc fc 50 f9 ad 81 5b ff 00 34 24 54 a3 2b 39 d2 d4 4a 45 6b 40 55 ac 9c 1c 55 bd df e9 2f e7 be 8c a9 ee 0f 83 c4 c9 b3 4c ac c3 55 7f 8f 9d cf b0 69 b0 d8 fb 98 fc 99 52 91 0f 80 69 62 14 59 50 12 4e 86 53 27 eb 6e 20 b0 87 ca de 60 b1 f7 b6 f2 34 90 f1 95 6c 8a 7f f4 e5 42 0d 6c 9a 9b 8a fd a9 e4 fd ab 99 ae f8 24 85 3c 8a 45 24 9e 58 d4 71 05 a0 a4 d6 b7 43 c5 47 72 ca a0 7e 76 50 c0 82 36 32 31 fa 29 57 ee 8b 79 1c 63 44 8a 9e f5 1f 7a 71 56 99 2e d7 92 Data Ascii: QFFjW_O ?0#qk<&6MN&ixK#R;6GLugTe<P[4$T+9JEk@UU/LUiRibYPNS'n `4lBl$<E$XqCGr~vP621)WycDzqV.
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: ee 3a 9f 3b 89 bf e9 cb 6b 4b 7b c5 79 fa 77 aa b1 93 e1 a4 c6 e6 a7 02 af 23 82 1b 99 a3 b7 b8 13 43 d1 19 5c 7e 2a 7c 8b 5e dc ac 22 7b 9e 80 9e 79 a5 97 d2 34 bd 52 71 26 f5 3f 95 76 fb 16 97 17 16 f6 28 22 6d 0e 94 cd 1c 46 4e 47 b8 90 f6 32 17 53 5f 5d 5c dd 4d f5 a4 f2 db 47 1c 91 b6 8f 47 f5 2e 2a d2 1b d6 bf bb 5b 72 f7 7f c3 29 25 79 58 d8 97 ea 76 c4 b6 56 53 89 e1 e9 3a 03 2f 8e c4 de e4 9e fa e9 61 5e a0 b9 86 ef 39 96 b8 82 40 f1 74 97 5a 3e 31 3f 97 64 5c b5 9a 93 f0 2b a3 67 b5 c6 60 1e da e2 70 b3 33 f7 2f 6e de b0 19 5c 7d ae 12 6b 79 ae 42 cb d3 79 94 c7 bb 41 72 fa b7 cd 1b 06 bc 33 59 4e ae 9b d8 ae 3e 6b 8d 72 ab c9 00 8f e6 a6 fd 45 94 53 27 cd 7d 26 b7 f8 1f 21 1e 9c ee ac ce ec f5 5a 1c d8 6a a6 a9 7f a5 10 a9 0e 82 ad 1a 0d b5 a5 Data Ascii: :;kK{yw#C\~\|^"{y4Rq&?v("mFNG2S_]\MGG.[r)%yXvVS:/a^9@tZ>1?d\+g`p3/n\}kyByAr3YN>krES'}&!Zj
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: e8 f9 57 bc f8 22 21 c6 6c e5 b3 3f 08 f0 40 c0 74 e4 9f 1e f1 c4 5a d0 0d ed 38 4a a4 c6 fe 1f ed 5f 04 20 e1 1c e5 4a ac 07 70 db 82 c7 7c fc ce 58 b9 86 50 c8 ed 82 98 43 a9 28 a2 da 46 91 6c 6a 30 4e 3f 0e 8e ea 88 60 b1 e4 81 96 d9 61 09 c6 e2 ac 46 f6 3b aa 79 64 75 4c ea 18 e2 8c 93 af 2e c4 28 55 dd bb 30 50 dc 6f 9a 6d 80 67 09 d6 10 72 4f b5 9a 4d ab 9c 6d 0d c5 b7 f3 d1 0b 09 61 e1 9c 48 cc a8 e1 03 14 d0 58 41 b0 2a 07 70 12 3e 53 82 c8 58 14 93 1c ce e4 d8 a7 cf 72 e5 10 54 d5 3e 87 73 15 37 c6 09 a2 b0 3f 50 54 b4 30 7b 15 db 48 00 b2 90 96 dd 88 8f 24 05 81 a2 23 fa 58 83 ae 4a 2e 01 1c 77 9c 20 c2 06 09 f2 51 b4 f8 2c 4a 22 1e 10 b0 ec 36 37 9a 6b 42 6e 28 34 b4 7f c9 50 d0 89 ff 00 92 36 d9 b7 51 2a 78 9a d6 dc 10 75 f9 ec d1 6a 81 5a 6c Data Ascii: W"!l?@tZ8J_ Jp\|XPC(Flj0N?`aF;yduL.(U0PomgrOMmaHXAp>SXrT>s7?PT0{H$#XJ.w Q,J"67kBn(4P6QxujZl
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 3b 27 7b ff c4 00 27 10 01 00 02 02 02 02 02 03 00 03 01 01 01 00 00 00 01 00 11 21 31 41 51 61 71 10 81 91 a1 b1 20 40 c1 30 f0 d1 ff da 00 08 01 01 00 01 3f 10 ff 00 49 f6 00 b2 f4 19 84 4b a7 94 86 4c de 00 94 8f 24 30 4c ae aa c5 37 55 c4 8c 8f d5 cd b2 43 2a e9 2d c2 38 5e c8 b0 70 d2 a9 5f ea 90 d3 de 44 d2 dd 49 dc ec 36 98 e2 24 91 f6 90 b5 86 00 0b 73 db cc 5b 9c 26 6c 1c 18 01 11 dc a9 cd 99 c4 57 ac 0a 1e 7d ff 00 a8 e9 98 4b 5b 5d 68 8e c5 09 72 c9 7f 0b 0b d9 dc 5a ed 1c 68 b0 fb 06 6a 1d e4 fd eb 85 ff 00 54 61 9d 5b ea 08 a0 57 68 f6 10 2f 87 da 96 1c 63 e0 65 e0 79 38 88 8c d9 ea d7 28 16 b4 6e b9 9e 2c c8 63 fd 24 54 62 84 3e 8b e6 50 5a f4 1b f1 de 11 8c a0 2d bc 91 55 07 17 4f a6 c8 19 72 1b 47 04 eb 1f a6 10 0e b7 9c 0c d2 0f 2c 1c 0b Data Ascii: ;'{'!1AQaq @0?IKL$0L7UC*-8^p_DI6$s[&lW}K[]hrZhjTa[Wh/cey8(n,c$Tb>PZ-UOrG,
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: fc 10 46 e6 d2 e8 8d 25 2d da 59 07 0a 40 c5 2b ca 31 a5 42 8b 8b f0 03 b6 1b 09 49 40 1b 28 84 f9 f2 41 ef 92 70 e3 6d 09 ec 8c 74 47 81 9c ea 36 c2 dc 47 99 5e 2f 19 cf 0d d5 d7 2d e4 5f 4e 22 c0 47 91 df 98 de e9 03 81 8d dc c1 91 9c a8 e1 88 0f 44 22 b0 9e b9 b1 7e 07 04 04 80 11 7a cd 89 18 2f b3 17 6b 8f 81 2b 47 2d a5 d3 80 a8 a8 97 76 6b 60 a4 00 de 85 a6 97 4c 4c a8 64 3f 0d 42 d9 09 85 ac 52 4d c4 b0 e7 c3 2f ca 70 95 4e 15 0d 1e 60 69 cb f5 14 aa e6 fe 02 82 7a e0 fb 50 de 95 48 c7 73 d7 89 77 8a 9f 65 b1 2f ed 5e 52 70 8e 8b 52 37 0a 53 38 82 42 92 76 63 9b 0b 99 28 97 e9 a9 8c 59 6c d0 52 13 ec e2 67 51 d5 ae d9 ab 2a fc ce f8 52 43 9a 5e cf d4 41 5a 5a a6 bb bf 91 86 98 fa ac 86 02 20 5d 2e 43 36 5e 65 17 46 18 71 80 3d 5c 39 f5 75 01 af a9 Data Ascii: F%-Y@+1BI@(ApmtG6G^/-_N"GD"~z/k+G-vk`LLd?BRM/pN`izPHswe/^RpR7S8Bvc(YlRgQ*RC^AZZ ].C6^eFq=\9u
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: dc 07 e7 da 1c 4b 81 d3 46 17 86 0f 4d 5b 2e 2b e8 6a 54 d2 65 45 88 f6 b2 91 76 85 75 ee 20 56 3a 25 46 35 33 01 82 29 4b 33 89 61 1c 4b 8b f0 7c 24 3a c0 a4 65 e5 33 9e 07 11 69 a4 0b b6 86 82 04 d9 a1 74 69 39 74 aa 9a 4f 93 98 7b 75 0c 5c 4a f0 70 65 f4 42 dd 4d d1 77 0a bf 60 e0 70 25 ed a5 93 d9 52 f3 70 91 11 f3 0d 55 5a 65 cd 6f 17 99 9e 0f d7 1e 1a 3a 87 bf 23 93 81 d3 09 bb bd 35 f8 20 04 98 88 ad c1 56 16 0b f0 fc 16 1c 9c b4 80 43 af 03 56 cc b8 55 07 01 ca 10 12 a9 7c 3b 29 3e b9 1c 36 2e f7 8c 30 9c 6a 65 c5 1c c0 63 21 03 80 9d 84 57 aa 6c b6 32 ed bd dd 4b 07 69 90 71 1a ff 00 56 3f 08 3a b7 73 36 cc 6f 15 5e ae 2b 0b d8 b3 5f 16 da d7 03 c4 5b 04 f1 32 02 a1 a1 58 8a c3 35 1b f8 0f 85 42 ac 78 01 c2 8e 5f 2c 54 7a ec 31 e8 8b 2b 86 87 91 Data Ascii: KFM[.+jTeEvu V:%F53)K3aK\|$:e3iti9tO{u\JpeBMw`p%RpUZeo:#5 VCVU\|;)>6.0jec!Wl2KiqV?:s6o^+_[2X5Bx_,Tz1+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49850	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:51:59 UTC	370	OUT	GET /movies/1231337707-poster-Tache.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:00 UTC	911	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 10129 Connection: close Last-Modified: Mon, 16 Dec 2024 04:39:30 GMT ETag: "2791-6295bc4288a89" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3375 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zhAplZW5hVeG0aZqzzX1GMCEBoSrgXzw4K0x5N0zn4m8UjNxoxzLrN9qyHqrMRcNZapNAuFlfVbQlnPzBme%2BkkdX9RN8hktmwOnoaIbZiEUMNYmT8sEV1fO5vS8gUNk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c75bb8843c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1617&min_rtt=1615&rtt_var=611&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=948&delivery_rate=1783750&cwnd=152&unsent_bytes=0&cid=3e9ca4c05f46f9ec&ts=449&x=0"
2024-12-17 10:52:00 UTC	458	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 03 04 06 07 02 01 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 df d2 40 92 40 92 40 92 40 92 40 92 40 92 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwJ"4@@@@@@
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: e1 35 b7 7c 75 cc af cb 2e 65 ed ad a9 fa 93 0d 96 8a a6 64 3a db a0 c1 ab ca 7c 37 c3 f2 37 04 f2 67 90 0d c1 68 66 c5 ef d6 42 52 87 d3 a1 2b d6 79 3f 17 e9 cf 18 33 f2 fd 3c 76 bd 9b f9 ef 0a c8 df af b9 db 83 33 5d 3d 9e ca fc fd 55 d2 73 fa 73 d4 1b 79 fa 96 e3 55 eb 0f 37 51 ce e4 3c 94 06 cd b2 53 6d 6f 8b 3f 23 55 45 de a0 e6 d0 60 5f 85 d7 93 3e 8b a1 d3 9e 56 dd ef e3 bd 0f 8c fa 55 55 8c f9 db 33 a0 b3 69 a4 bc f3 c4 dc 77 44 cb 74 ce ff 00 62 aa 02 e2 ed bc 89 b9 36 fb 97 df 72 cb 5c 12 fc bd 47 e5 04 9c 97 9e db 51 db 08 37 05 fa 2b 89 89 ba b0 a1 1e 69 e3 4c e0 f7 ba b9 20 bd 4c 12 a5 e2 dd 89 5d a1 c9 ae 0c 9f 50 8f 4d d4 28 22 5b 14 fe 7e 6f af a6 73 03 08 4a 7a 18 08 96 3e 9c ce 2a bb ae 21 1e 91 de 85 71 6f 65 42 6f 68 f4 c8 76 0a d5 a7 Data Ascii: 5\|u.ed:\|77ghfBR+y?3<v3]=UssyU7Q<Smo?#UE`_>VUU3iwDtb6r\GQ7+iL L]PM("[~osJz>*!qoeBohv
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: a5 8c a5 31 8e ac 70 54 6a 94 41 98 2f 36 5b 29 28 33 82 20 0f 2c 02 90 95 bc 4a 20 83 04 b0 64 66 4a aa ce 0a a1 01 70 d5 ae d5 1d a7 10 a7 69 c7 c3 fe 21 e9 ab 12 d7 7d 53 2b a6 bb a0 da d3 fc 58 4a 02 9f 5f e7 d7 9e 11 92 b8 e8 c2 23 25 43 31 65 40 33 73 91 33 b6 d9 b2 d9 98 8c 11 ef 06 22 21 90 53 30 6c 0c 55 97 46 2e f9 46 2e ca 8e 16 e8 98 f6 e7 13 bf 35 dd 57 7e 96 bc ac ad d0 a3 f4 c2 c8 1b 0c 5a e2 06 67 b1 33 cf db 26 7f 23 31 31 f8 c9 9c 38 ce f3 7c 63 15 7c 22 31 c4 63 12 56 8a 7f 96 30 3b 8c 64 47 58 bf f6 19 fc c9 cf 8d 46 cc 0a 2c f9 4f 0f 01 76 c3 75 4a e5 4b ba 07 d9 60 3d 4f 28 a2 93 5a d8 12 50 2b eb 26 62 26 3a e9 8f 91 90 b6 39 f2 a3 06 c0 cc 5b bf 5a a8 58 e6 5a b0 2b dc 8a 95 e2 1b 75 0f 0e 01 93 34 6c 96 1e b6 fe 7c 2b a3 93 52 de Data Ascii: 1pTjA/6[)(3 ,J dfJpi!}S+XJ_#%C1e@3s3"!S0lUF.F.5W~Zg3&#118\|c\|"1cV0;dGXF,OvuJK`=O(ZP+&b&:9[ZXZ+u4l\|+R
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 8a d7 fc 0b 74 ed f7 87 64 04 76 16 25 93 b2 57 e5 a6 5e c8 22 35 f1 57 c8 be bd a8 5e 1b 85 c9 4d d3 0c 8b 28 7c 17 1e d5 b5 85 ac 7c 65 16 c4 15 52 02 16 bd 28 86 de 67 83 36 06 db 45 6e 49 d1 fa 57 e4 96 20 df c7 6e b2 95 80 5a 2c 85 aa c8 86 95 48 29 af 5e 3b 4a 7a 85 21 87 30 86 21 96 af ab c6 e3 a2 46 dc 4f a1 f1 fc a9 53 49 1a 66 12 b6 95 de a6 02 3b 1c 99 e8 81 f2 04 9b 92 32 1b 0f d6 96 ba cb e4 3d 75 96 c6 14 95 cb 3e 62 c2 f0 ca 0c f6 5b db bb d5 4b 71 32 47 5b af 0d 56 f6 6a c5 61 45 bc 2a 20 a8 5d 64 f4 15 44 a1 b2 94 c5 fb b2 d3 5c 13 a6 fb 02 61 c3 24 b3 89 9b 95 d8 42 29 74 2e d0 6c 55 af d7 ab 9b ec a5 94 77 03 b4 43 1b 0b c8 b8 4a 00 b2 24 2c 64 0c 11 7e 2d 5c 11 29 60 fa ec d8 86 1e 93 f9 2e 6e fa 62 b7 20 43 15 4a 72 e2 a4 55 a6 db d8 Data Ascii: tdv%W^"5W^M(\|\|eR(g6EnIW nZ,H)^;Jz!0!FOSIf;2=u>b[Kq2G[VjaE* ]dD\a$B)t.lUwCJ$,d~-\)`.nb CJrU
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 13 de 44 ce b3 41 3e 7a 8d fd 2e 9e a7 9a c0 38 de f3 db 3a 2d c8 ae 34 5b bc fb 06 f6 4e 34 3b 8f 09 d0 6e 66 5b c7 37 72 fd af 17 e5 6d 71 f1 7e 5f ef b3 c5 79 87 cc ad c5 f9 58 08 71 4d eb 35 ae e1 5b e3 0f ec de 56 ab 63 c0 f9 81 3d bc 1f 95 05 56 70 ee 5b 36 13 c3 79 74 b6 a7 08 e4 bf 3d 9c 27 90 80 ff 00 63 f2 22 45 fe 07 c9 65 7c 57 8b 72 4a 55 7e cb bb cd 9e 83 7e ea 9a 2e 39 bf ae 8d af 16 dd 58 49 70 9e 4f df fa fa 8f eb d4 7f af a8 fe 9d 46 75 19 d4 7f d6 ff 00 ff c4 00 43 10 00 02 01 03 03 02 05 01 05 04 07 04 0b 00 00 00 01 02 00 03 11 21 04 12 31 41 51 05 10 13 22 61 71 20 32 35 81 91 23 52 92 93 06 14 15 24 42 62 82 34 60 72 d1 30 33 43 53 73 a1 b1 b2 b3 e1 f1 ff da 00 08 01 01 00 06 3f 00 ff 00 75 2e 34 74 8f d5 9a 7f b0 51 fe 36 99 d0 d1 Data Ascii: DA>z.8:-4[N4;nf[7rmq~_yXqM5[Vc=Vp[6yt='c"Ee\|WrJU~~.9XIpOFuC!1AQ"aq 25#R$Bb4`r03CSs?u.4tQ6
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: e6 16 9b d0 e0 18 26 32 63 6d 3e e0 72 21 60 48 3f 13 6d e5 a3 3e 4c a5 58 2f fd a0 06 29 34 56 a5 3b 0d cb d4 41 ac d0 31 6a 44 7b 90 f2 b0 43 f6 01 ec 65 27 3d 62 b9 30 1b f9 f3 31 00 26 2b a0 cd a6 63 4a 62 99 c5 a0 20 cd f5 ea 85 bf 02 7f 59 a6 a4 23 18 08 3c cb de 0c c0 46 2f 29 b7 77 83 df 8b 64 4a b4 1b 28 d1 f5 1a 51 be 91 c9 51 c8 8c 33 71 d3 c8 41 07 d4 4a 23 e2 02 3e d1 66 36 02 6d bd 85 b0 21 1d cc 2b de 53 08 db ad 83 18 ec 72 3a 41 5a b5 50 cf d8 f4 85 2a 11 63 1a 91 37 53 f7 4c 2c a3 88 b7 16 26 05 e3 17 83 4c 2d e9 24 da 52 f1 08 b8 53 14 1c 82 04 35 74 e1 69 d7 b6 08 e1 a3 d2 aa 84 3a 9b 11 e6 83 e6 53 10 7d a3 4d 4f b5 4c f5 0b 64 45 d4 d3 37 2e b8 8c 6f fe 29 51 45 4f 75 e5 dd c5 fb 5e 2a fa b1 50 b8 6c c4 02 a0 dd bb 02 31 bc f7 03 70 Data Ascii: &2cm>r!`H?m>LX/)4V;A1jD{Ce'=b01&+cJb Y#<F/)wdJ(QQ3qAJ#>f6m!+Sr:AZPc7SL,&L-$RS5ti:S}MOLdE7.o)QEOu^Pl1p
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 4d ba 03 0f 62 25 6e ce 01 8a 7b ac 20 f7 f3 38 fb 29 ff 00 10 9c c0 3b ca d4 c3 62 8a 00 20 24 8d bb ac 4c a7 a6 2f be 99 1e ea 9d 49 94 99 5f d4 a0 f8 2e 38 04 c0 6d 7b 8e 67 39 eb 08 62 6d 2c 0d d2 90 b9 1d cf 69 ea 54 51 7e 80 74 89 65 b7 1d 25 60 5a c6 cd 10 b1 c2 c3 61 19 7a 89 b4 f2 26 9a a0 ff 00 10 22 53 26 63 bc 02 62 5f ca f6 86 6a 18 d7 a3 45 28 a2 bb bd 66 d8 a0 13 b7 98 34 da 2f 14 f0 da b5 be f0 44 af 73 65 8f 4a a7 8c 78 62 54 a6 4a ba b6 a0 02 ac 39 06 f2 bd 3a 8c ac 69 28 62 c8 6e a4 11 b8 58 c5 d1 d2 a5 ba ae aa a9 40 4f 03 e4 fc 09 e2 9a 2a e1 92 be 9e a1 46 5f 94 36 81 e8 d6 eb 62 08 89 a5 d3 69 db 52 f5 86 28 a0 dd 8e f3 fa ae bf c5 74 89 55 4d bd 30 cd 55 d3 ba b6 c0 61 1a 1d 76 9b 50 df f7 6a fb 1f f8 5a d1 74 8b ac a0 ba 87 62 89 Data Ascii: Mb%n{ 8);b $L/I_.8m{g9bm,iTQ~te%`Zaz&"S&cb_jE(f4/DseJxbTJ9:i(bnX@O*F_6biR(tUM0UavPjZtb
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: d2 3d 3a 7e 19 a8 62 4f 00 08 c9 5b c2 eb a6 7a 81 17 67 87 56 66 07 80 04 36 f0 6d 4f e8 3f df 1f ff c4 00 2d 11 00 02 02 02 02 00 05 03 03 04 03 00 00 00 00 00 01 02 00 11 03 21 12 31 04 10 13 41 51 22 32 61 05 20 52 14 23 30 71 40 91 b1 ff da 00 08 01 02 01 01 3f 00 ff 00 37 35 9e b2 7c c0 ea 7a 85 d4 40 c0 f5 e5 47 cf 26 64 c6 69 8c 0c 08 b1 32 78 8c 58 be e3 3f af f0 df ca 0f d4 3c 31 e9 8f fd 41 91 ae 72 5f 88 ae 04 d3 10 20 01 44 bf d9 fa 80 e3 87 98 16 44 c1 e3 f1 ba 05 36 1a 65 7e 4c 43 43 88 0b a6 b8 a1 90 92 25 4a 95 30 af 67 f6 d4 f1 63 fb 19 2c 7b 44 c4 3e f0 75 1d d1 8d 03 b8 3d 44 6a ad 18 55 9f 40 4a 8b bd 40 80 40 fc 75 3d 41 3d 45 9e aa cf 59 3e 60 c8 0c ca 3d 4c 6e bf 22 64 45 c6 a4 5d 18 88 81 39 01 f5 44 77 6e c6 84 c2 c9 51 58 6e 2d Data Ascii: =:~bO[zgVf6mO?-!1AQ"2a R#0q@?75\|z@G&di2xX?<1Ar_ DD6e~LCC%J0gc,{D>u=DjU@J@@u=A=EY>`=Ln"dE]9DwnQXn-
2024-12-17 10:52:00 UTC	88	IN	Data Raw: a3 96 72 50 e2 6a ca a8 98 a3 2d 95 12 53 8c eb 9b b2 5b c6 90 e3 52 b5 ec 55 50 1b 7b 13 e5 57 85 c2 b1 c6 e9 a1 a2 84 8c 6a e7 cf 45 ca 39 2d 33 24 e5 b2 77 66 6c bb 42 0e 90 f2 5a 4b 51 4e 1b 63 e3 a1 64 7b dd 71 64 e7 72 7d 12 8b d9 9a ba 64 7a ff 00 9b ff d9 Data Ascii: rPj-S[RUP{WjE9-3$wflBZKQNcd{qdr}dz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49851	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:00 UTC	402	OUT	GET /movies/12321249808-poster-Jack-Mimoun-the-Secrets-of-Val-Verde.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:00 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 18607 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:28 GMT ETag: "48af-6295bc7aabe82" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3375 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gW4bUzeCmXU0qnXZTTMz2o3y6VCFDGCszXIjmx0KqCUwg9yKiekvLcIFZada66GKSMxWfsIYrOozyuxwwPlGmxEcoD%2FywMsqR3PcnzEbki%2BBiwluGhkR%2B16zoDZXu6s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c761c307c88-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&min_rtt=1790&rtt_var=692&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=980&delivery_rate=1558996&cwnd=219&unsent_bytes=0&cid=ce70b90ac6f336b0&ts=452&x=0"
2024-12-17 10:52:00 UTC	454	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 00 02 05 03 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f2 a7 77 2c c7 70 f4 9c 3c 30 8f 70 c8 1d Data Ascii: JFIF.$ $.5--5@99@QMQjj.$ $.5--5@99@QMQjjJ"4w,p<0p
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: c8 27 15 3a c9 41 46 0e 3e b4 4d 52 38 02 ff 00 37 4a b8 61 5a ee fe b9 61 c1 e7 4a 9b b6 c0 6d 68 d6 2f 1e 7e d8 2f ac b4 c8 4f aa ae 37 72 73 34 be de 5b 2e 7b 53 8a 57 0c c2 75 8f 2f 71 ae 69 f9 92 da d1 d3 de 7c f5 1b 7c 7c d5 70 d7 d3 b6 5e 19 5a 77 15 db ad 70 c0 1a 54 1e 00 b5 6c ba 0b 09 bc 59 ae 64 d0 90 da 37 7a bd 59 cf 1d 85 36 9a 75 41 4e bb 95 ff 00 2a 71 9f 48 dc f1 fb 8b e9 d7 e7 29 16 17 53 d7 5f 65 52 99 dc ad 79 fc 55 3d ce 1a 2e c1 83 db fa d1 9a d6 b4 38 2d 48 a0 5a eb 8e 0a c8 08 6a 2c 49 d8 7b a2 f5 b0 4e ab 4a 47 55 e9 a9 16 5e ba 10 ef df 1e eb 46 6a b4 4b b2 9d e5 33 b6 b7 95 79 c0 67 9a 8c f5 5a c4 15 45 0d 5c fd 5d d6 5b 6d e7 5c e5 e6 8d 57 69 6b b3 78 19 2c 0f 45 73 4d 81 f8 27 4d 81 98 5b 67 cb 67 cd 65 22 b5 18 52 fb 41 97 Data Ascii: ':AF>MR87JaZaJmh/~/O7rs4[.{SWu/qi\|\|\|p^ZwpTlYd7zY6uAN*qH)S_eRyU=.8-HZj,I{NJGU^FjK3ygZE\][m\Wikx,EsM'M[gge"RA
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 00 b6 bf f5 e0 23 25 5b 1f 2c 98 90 2e 84 5e c3 39 d3 a9 56 2a 7e 7c 31 ae 3a ad 42 7b 0d c6 24 ce 98 54 a3 07 08 f8 cb 3c 1b f5 f4 cf f7 0d a4 b1 55 e4 e3 62 ac 72 25 dd bf cb 7a e3 7e a4 31 d4 af 04 1d 6b 27 26 55 c9 cf 6d 18 f4 b5 8e 7b e9 a1 e9 e1 40 f5 94 ed e9 fb 7c 12 22 df 8d 49 1f 13 8d 76 d7 6f 05 f9 d4 69 2a fa 95 72 21 af 1f 4d 2c 27 aa 29 6b f0 b5 4c 1d 43 12 a1 05 fe c6 88 88 ba b2 76 d6 db b7 5a dc ad a5 7a cb 97 9b f4 d6 df 55 fa 4f 24 92 be ed b0 3d 0e 94 a9 27 56 b4 71 12 47 a7 4f 2b 6d f4 d2 b8 1c 5e 47 2d df be 01 ef db 41 bd 43 5b 1c d1 99 fc b4 9f 64 d5 6f bc ee 1a 27 c9 a3 65 00 3d 16 c5 1d b6 69 e4 44 55 f5 b4 26 35 7f 2b 58 48 85 25 65 32 4f 4e 3e 9e e5 0a 47 61 e3 69 de 57 65 e3 f9 d4 4b cd c0 d2 44 14 a6 35 6a 30 14 81 f7 78 76 Data Ascii: #%[,.^9V~\|1:B{$T<Ubr%z~1k'&Um{@\|"Ivoir!M,')kLCvZzUO$='VqGO+m^G-AC[do'e=iDU&5+XH%e2ON>GaiWeKD5j0xv
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 69 bb 90 9a 81 79 4b c0 f6 31 ca f5 f9 37 f9 57 b5 e6 13 8d 79 3a 4e f4 52 65 97 cd 42 c8 f5 68 ca 92 48 6b d8 49 8c 53 2f 2f 82 0f 0e 4d 91 f0 88 a9 c7 07 d5 34 1d 7a 52 ce bf cd 18 03 0c 06 5a 72 61 82 15 51 cd e6 89 d3 ee 18 27 c3 6e 48 bc 8c 8e fd f5 49 04 9b 70 e2 06 3c 9c 9d 77 0a be 9d d5 e3 5e 8d 68 57 bf f3 45 43 aa e7 35 f6 9d b5 15 d9 6b e7 52 f9 4b 30 24 29 2a 79 91 d2 92 59 ae 4d 1f b4 f5 66 9e 95 ab 3d 31 24 90 6c 33 98 7a cd 80 9b 62 d8 16 8f 97 e7 ab 32 ca 90 48 6c 2f bf 73 77 54 d8 21 89 1b df 4a ee 80 bb 0c 6b 94 88 fd a3 0a c4 33 b7 a8 92 76 4a bc de 41 8c 8b d5 2d 4c be 5d 24 e1 5c ed 16 11 8b 09 41 d3 2f 52 bc ac e8 4c f1 ce e2 3f 5c 67 8d 79 2c 79 b8 89 05 57 6f 82 e4 77 9e 54 4f 6f 74 a6 29 5b 28 bd e1 1d 53 12 f0 74 4d 5a 40 8c 7d Data Ascii: iyK17Wy:NReBhHkIS//M4zRZraQ'nHIp<w^hWEC5kRK0$)*yYMf=1$l3zb2Hl/swT!Jk3vJA-L]$\A/RL?\gy,yWowTOot)[(StMZ@}
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 54 a5 02 fa 74 ac e5 f8 c4 15 52 4b d6 09 e9 4a c4 96 c7 06 76 04 eb 6a 87 a6 e6 79 94 f2 b3 61 0a 1c 3f a6 dd ae bf b6 9d 92 9e dd 7e 7e 3c 61 56 5b 71 3c 13 b4 45 b9 69 ab 06 93 97 20 ba ea 49 1b e1 48 c5 2a c2 d9 fc 6a 75 58 33 c7 b9 88 33 b7 32 7b ec 69 ff 00 11 8b 5f a8 6a 0a db 94 bc 3e cf d3 1b 77 9a bb d6 71 ed 36 b7 0b 29 5e 22 4e 84 57 16 3e bc eb ed d5 22 78 de a8 2a 75 2c 52 b4 f1 c2 08 e3 6e fb f9 91 26 40 3b 95 83 56 54 23 1c 25 72 ee cd 9c 9c 6b 3a ce ad 17 e7 b7 f1 19 63 65 d3 a0 dd 4e 53 4f 34 72 44 27 6e 31 bd cd d3 10 62 07 91 65 ab 7e 97 03 ed 4b cd da 3b 32 74 da 46 3a 8b 67 5e 04 f3 73 aa ac e9 2c 6a 87 1a fd 42 1c c7 5a 43 10 01 25 01 54 e7 49 83 86 c6 bf 4a c6 1a 7f 52 eb 74 84 a0 1a 8b 21 fe 7b 6c b2 b2 ee f0 e3 e3 f5 44 6f 23 c3 Data Ascii: TtRKJvjya?~~<aV[q<Ei IHjuX332{i_j>wq6)^"NW>"xu,Rn&@;VT#%rk:ceNSO4rD'n1be~K;2tF:g^s,jBZC%TIJRt!{lDo#
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: d7 0c 31 a3 8f 15 1c 98 28 d4 51 43 0f 00 ec 02 b4 90 bb 61 40 c0 b4 0d 68 9b 9e 64 8a 60 20 03 e3 57 3b 44 ea 8e 35 b7 34 95 d2 52 b1 f5 34 2b 43 d4 05 98 72 86 90 b8 8c c2 62 ba a7 4a c4 ad 20 f3 4a 07 f4 de 94 6e 56 f3 e2 6d 96 bc 28 8e 1f 32 4b b7 ff 00 6d 97 b0 5c 2d 28 17 10 3d e1 d7 83 6a f7 5f ad 39 69 29 d4 96 5e f2 5b 39 96 84 89 11 78 2d 62 33 0c b0 ac 52 19 cc 82 43 cb db 2a 09 15 0f 71 d7 60 d3 c5 34 3c 4c a5 4a dd f2 e2 28 c8 60 75 e7 c3 22 2f 14 06 ce f3 2b c4 91 a0 d4 ae 5a 28 f2 72 7c 07 87 5d f8 70 3d c0 9d c9 3f 3a af 2a fb a1 dd 46 a1 93 02 40 c0 85 13 29 31 e7 1a 3c 19 3d 44 e3 a7 56 15 91 d5 5c 0a f3 18 63 55 d5 79 3a 21 50 1d 2d 86 30 1c 9d 35 86 90 94 3a f3 65 d5 8e 7b 4a 23 67 eb 12 39 f9 a2 1d 7b f7 ea b4 53 9d 09 c2 07 5f c3 b0 Data Ascii: 1(QCa@hd` W;D54R4+CrbJ JnVm(2Km\-(=j_9i)^[9x-b3RCq`4<LJ(`u"/+Z(r\|]p=?:F@)1<=DV\cUy:!P-05:e{J#g9{S_
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 6f 6e 32 50 3a c8 3e cd e9 01 5a 13 76 f8 39 78 e6 89 32 d6 d6 bb e8 10 31 33 0e ba 72 43 bb 64 2a e2 77 8c 02 7b 81 81 94 60 d1 aa b2 60 7d cf 7a 92 17 57 40 45 de 45 a3 65 7f 8c 11 9e bc 8a 8a b0 01 f3 40 d1 5b 5d 11 f0 b5 d7 93 2b 64 e0 00 17 b4 31 93 93 18 43 9a ec 5a 66 a4 a2 da 90 a7 1e 48 ba 4e d2 20 ab 47 45 ad 9f b8 0f b4 36 4f 9e ae d0 36 a7 63 b8 56 63 3c 0e a3 91 5d 6c 46 08 3e d7 e9 d8 63 66 35 39 05 00 8d 43 72 85 6f 75 d6 a7 dd 6e 4c 56 c6 f3 98 08 92 d6 20 25 e3 58 ee b6 93 09 b6 d5 0c d0 65 f6 57 9d 81 8c 32 00 a3 5a 91 c5 b0 0a e7 f2 9e d2 22 4d 29 7b 07 23 c6 5a fe f3 ce 15 29 ee 0c c2 38 8d 13 2c d8 cb 3f f4 b8 70 53 d0 fa 72 09 9d f7 ce 0e 76 a3 dd 57 0b 7a c6 49 37 77 e8 60 c3 74 34 4e ae 81 ba 84 13 b2 d4 67 e2 53 fb 83 48 ee ab cf Data Ascii: on2P:>Zv9x213rCd*w{``}zW@EEe@[]+d1CZfHN GE6O6cVc<]lF>cf59CrounLV %XeW2Z"M){#Z)8,?pSrvWzI7w`t4NgSH
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 45 d7 c8 02 a5 d9 c0 e4 8b 8f 5c f6 c8 0e ce 3c 14 cc ca c5 a5 a2 a7 98 d5 6c d4 05 24 a3 7d b7 a6 7e 28 4e 04 15 a2 b8 e5 1a a8 57 e3 cc 42 17 81 31 85 66 0a bb 7e d2 ee 45 da af 89 c1 60 d0 04 80 ba d6 3a 39 39 31 cf 68 f0 54 11 e1 52 9a dc 1a e3 40 b8 da e0 72 22 14 76 3f 84 b3 68 f5 25 43 a2 bc 8c ae a8 96 8d c6 6a c1 e2 09 ad e7 0a 61 9d 55 c7 12 e8 ba 64 d2 08 ad 2a af 06 da 81 4b c4 d6 56 e8 23 c5 03 28 a2 04 15 0a e9 e8 12 9f 32 74 00 49 3e 08 b6 5d 83 1d 39 3e 9a a7 1a 87 02 7f e4 14 e9 27 d4 a3 8b e0 50 20 5d 13 46 70 1c f6 45 c5 c1 a0 61 fd d5 01 1b 38 23 b7 9a eb 2d 81 de a2 bd 9f e1 c4 a8 70 f2 01 ca f8 13 eb 0a d4 07 07 62 01 35 f3 50 c0 d6 60 75 c1 38 1c 44 9c 71 94 ea 09 35 07 dd 29 b8 ea 16 43 41 90 44 23 74 98 39 27 10 e7 10 6e 9b a0 e1 Data Ascii: E\<l$}~(NWB1f~E`:991hTR@r"v?h%CjaUd*KV#(2tI>]9>'P ]FpEa8#-pb5P`u8Dq5)CAD#t9'n
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: c2 d3 0b 59 66 28 b5 2a 05 b1 aa 24 3d 92 9d 7c 1c 6c c8 fc 95 e0 82 b8 0f c0 2c 44 6e 58 c1 9e 23 cd 51 51 81 ae 08 d4 31 72 96 06 6c 31 b9 56 45 13 21 dc dc 12 1a 4c 84 10 15 c4 7d 41 52 ea e6 b9 08 95 71 4d 0d b8 74 ef ea 37 d9 09 2d aa a4 10 8d 9e 6a fc 93 5a bf 32 8b 8a 57 7b cd 4b 78 87 1b 52 be 63 57 07 e1 2e 01 e9 2f 04 80 6a e9 a9 5f ac 5f 6e 0c 71 4e ff 00 a1 12 35 37 24 79 5a ff 00 01 2a 56 da fb 10 36 35 04 f5 0b a1 e6 37 b3 12 1a f3 16 2a de df cd 7e 10 fe b1 74 2c 57 63 b0 03 45 da 40 fe 0f e9 06 b7 d2 18 5e d3 e8 8f ec 55 9d 6f db a0 ff 00 91 0d 9e a8 bd cf 1f 44 4e b7 38 78 95 d4 04 5b be 90 b6 fd 0d 63 04 da 8e 1e 6f 0f f4 12 a7 5b 1c bc 1f 56 ea 54 25 16 ab 1f e6 ff 00 f2 2e 7e 9f e3 93 f9 23 16 a0 b6 ca b4 5a f1 16 48 4f 3f e8 f1 ee 1a Data Ascii: Yf($=\|l,DnX#QQ1rl1VE!L}ARqMt7-jZ2W{KxRcW./j__nqN57$yZV657*~t,WcE@^UoDN8x[co[VT%.~#ZHO?
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 6c 00 c2 7a e2 09 b0 86 82 db a9 f2 0c b8 2d 89 9b 2f 80 f2 d7 58 d7 98 83 aa 96 8e c1 e8 96 bc 36 fb f6 f5 2a 65 61 00 14 9c 25 4e 05 4f b6 de 73 ad e0 39 22 01 ce 1c 67 80 f1 34 60 ae ed 8f 03 cf 01 1e 3b 89 6f 92 d0 3d f9 8e bd 7e 55 92 83 4c 60 f9 17 e4 ea 36 77 38 43 2e 94 00 3d 8b dc 10 b7 6d 72 1b 15 43 28 c4 e2 dd 0d 7d b3 88 8b 9e d5 d2 0c 1b a3 74 22 72 35 94 fb 7a 87 fa 89 eb 02 9a c8 4e 64 99 8f a3 01 4a 6d 2b 2b 41 85 a1 82 ae 44 d8 b6 61 20 c1 75 47 27 cc 1b f6 db 44 3c cf b8 d0 c6 38 d5 9a 1f 76 fe 08 fd ea 93 b9 75 7a 21 2a ee a4 2b 92 ae 34 4a e2 6b e8 4f 1e e1 3a 8a 78 01 b3 ad 70 16 87 b0 ed 46 72 8d 38 4f ff 00 1c 53 5e 1e ee e8 58 28 b8 35 a7 06 18 b0 0e de 29 8a 5f f2 2c 51 b5 79 47 07 18 7b d9 86 d5 13 6d 76 7e d6 ca 12 b5 3c 47 b4 Data Ascii: lz-/X6ea%NOs9"g4`;o=~UL`6w8C.=mrC(}t"r5zNdJm++ADa uG'D<8vuz!+4JkO:xpFr8OS^X(5)_,QyG{mv~<G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49854	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:00 UTC	382	OUT	GET /movies/12330989112-poster-Sinister-Surgeon.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:00 UTC	914	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 14640 Connection: close Last-Modified: Mon, 16 Dec 2024 04:39:18 GMT ETag: "3930-6295bc37708b0" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bXm%2FJGkY3A5%2FjFLwtpT7SwQwUFKuqPdNM8JDRXjOdQ3ZFuMBqrGecy7GFjCgECJtES88iVhFe1UaJI23sLw%2Fr9q39xWcwLYfzihBn%2BlK9ZQsOqsxkVIuyaEkbFVa7UI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c77feba8c89-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1785&min_rtt=1774&rtt_var=688&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=960&delivery_rate=1564844&cwnd=202&unsent_bytes=0&cid=397ff30e6800cd0e&ts=451&x=0"
2024-12-17 10:52:00 UTC	455	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 01 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 cf 9d b1 5f 5b 95 53 3a 64 f9 4b 38 1b 3f Data Ascii: JFIF''#" "#>1++1>H<9<HWNNWmhm''#" "#>1++1>H<9<HWNNWmhmJ"4_[S:dK8?
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: e3 4f 21 64 da d5 16 53 ae 45 8f 2c 17 ce 84 41 76 c4 21 f8 f5 3a 46 9d e7 3e cc b2 ef 45 b1 c7 b7 30 99 a5 b7 53 ce e2 3e 83 ca 75 24 1d 6b 4e ae 74 af 93 d7 23 ae 31 2a 47 25 48 b7 3a 7f d6 5e 78 f4 7a e9 ae 49 f9 45 11 b9 c9 92 16 74 7f e6 0b 30 e8 0f 33 0e 2a 1d 54 a2 9d 87 20 d7 f0 f5 ee 1e aa b1 ca e9 49 75 30 06 a9 09 68 cd f8 dd 36 b9 99 ef e4 9c e8 71 f4 7e 7f 40 50 73 4f cc 41 e1 d7 62 93 7a fc 92 2b 3a f8 9a b9 9e 9e ef df 65 3f b9 d8 52 65 18 59 78 1d be ad 0f c5 94 a7 5f 84 43 a4 5d bc 39 8f ab 6f 32 88 9e eb 43 4c 4a 9c 3a 06 c4 13 6b d0 c9 5c 35 63 63 63 67 0e c8 5c 0b 40 04 50 5d cd bc 4f 3b 9a fc da b4 ba 3f 42 e8 c6 4d f7 df 67 9f 01 9c 79 f2 c8 1c 6a ea 8a 3e 78 d5 f3 01 75 28 b1 84 61 b6 99 e7 3a 6f 33 b3 48 47 7e f5 a0 38 58 ac 55 7a Data Ascii: O!dSE,Av!:F>E0S>u$kNt#1G%H:^xzIEt03T Iu0h6q~@PsOAbz+:e?ReYx_C]9o2CLJ:k\5cccg\@P]O;?BMgyj>xu(a:o3HG~8XUz
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: b7 38 ad 3a d1 26 62 ed cd 08 82 f8 ad 95 3b 2a 29 dd 57 48 a6 66 db e3 48 b7 8f 66 ef 9c 1a 2b 53 da a3 a9 e3 94 85 4b 32 fc 98 9a bb 4d 46 33 50 da f7 7c d4 d6 70 c6 bc ca 16 8c 60 b1 1d c0 6a 48 f6 d3 91 f1 40 12 29 ed e4 5f 2b 4b 1d 76 f9 a4 8d 87 c5 44 d2 46 c1 80 a8 6f 9d d3 c5 48 8c ee 5a 92 31 8f 34 22 1f 34 b0 cb 6d 26 f8 79 11 dd 86 fc 86 0f 75 3f 75 7d 89 97 19 a1 a7 39 1e 6a d5 1a 16 19 34 93 83 46 78 c7 cd 4d 72 ed ed 8c 54 16 fb 32 c7 f2 2b 5b 6a ea 78 6d e2 2f 2b 00 26 ea 4b 7b 75 65 8c 6e 6b cd 59 ee 13 04 f3 f5 0c 3f 12 73 fc a5 c9 4d 85 aa 1b cb 33 18 2c 76 ba dd d9 b2 83 b8 51 b2 8d d3 04 55 dd 9f 65 8d 28 a4 88 1f 9a 10 2f fe 20 8d 54 d3 a4 67 18 35 b0 56 da 02 b6 af ea b6 a1 a3 6e 8d f3 4d 03 67 0b 4b 68 3e 4d 7d 2a 63 cd 08 23 51 5b Data Ascii: 8:&b;)WHfHf+SK2MF3P\|p`jH@)_+KvDFoHZ14"4m&yu?u}9j4FxMrT2+[jxm/+&K{uenkY?sM3,vQUe(/ Tg5VnMgKh>M}c#Q[
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 0e 0c a0 92 a9 29 0f b8 20 22 f1 77 ed 98 45 b4 47 13 dc 6d 11 26 6a e1 1d 3e d9 52 85 47 8f 15 a3 bf da db ba a2 f8 a4 00 0a 61 ed ac ee 90 e2 b5 4c 80 2b 49 60 fe 28 67 e6 ae 02 ed 35 28 1b cd 03 59 cd 58 60 ca 54 d3 f0 cc 28 54 46 ad 5f 63 1a d2 ff 00 e3 ed 7d 6f d9 85 bb 61 43 0b ce ff 00 86 da 29 16 27 90 46 cd b5 1d a6 6e 0f 02 57 93 b1 6e 0c 8a c9 61 65 3d ce e5 88 26 75 1d a9 72 13 78 92 a3 8d 48 3e dc 54 56 cd 6d 86 da 40 b4 6d ca 29 2a 6c 94 3f a4 96 da 39 3b 67 20 ea b7 76 be d5 6a b6 8b 64 d6 c5 15 94 fc 55 d7 e1 53 ca a2 43 cd 15 c5 0e 6a 34 64 c3 86 c1 95 01 f7 67 9a 43 cd 40 c6 ba 7a e8 4b 6c d1 1f cb d3 5c 67 58 17 dd 84 be 74 0a 89 19 a0 92 4b d9 dd b4 47 72 90 49 7b b6 03 88 ae 5a 44 71 09 8d 23 59 09 56 3b 58 60 86 e0 91 52 6e cf 39 15 Data Ascii: ) "wEGm&j>RGaL+I`(g5(YX`T(TF_c}oaC)'FnWnae=&urxH>TVm@m)*l?9;g vjdUSCj4dgC@zKl\gXtKGrI{ZDq#YV;X`Rn9
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: c1 f5 d1 25 b3 9c e5 ee 64 57 72 45 47 1b 4b 22 46 a3 2d 67 a4 69 d6 f1 2a b4 0b 23 cd 67 65 22 e0 db 2d 49 a7 5b 89 08 58 d5 29 a2 ed 0c a9 cd 34 c7 1e 6a e7 12 8e 7c a5 b1 27 96 18 82 35 ed 26 cc 9a 3e de 58 62 a2 bb 8f e2 64 35 ab 27 7a 3d c8 43 52 9c 52 b5 5b 5c 76 ce d3 e1 67 3f 15 29 62 8c d4 f6 e5 ac e4 98 d0 5f 6e 6a 46 39 14 c7 b9 17 b0 d5 84 6e b0 b0 95 f7 b0 36 1a 45 b3 b6 c5 85 2e 7a bc 6f c4 09 85 d5 d3 ea cc 17 d1 0c d0 fb 09 e7 dc 64 62 31 4d 5a 3c 61 0f d4 b2 16 2f ab c8 a7 98 4d 47 a9 77 70 14 73 72 19 a2 de bf 91 3b d7 22 a7 85 97 91 4d 9a 00 d5 a4 b2 a2 ec 53 8a fe 3a 17 fb 93 33 c8 7b ea 0b 24 31 f6 c5 82 06 85 83 0e 35 5b 23 6f 39 61 f8 29 ad f8 c0 1e 6c b6 b8 15 7c 8a 96 4e 6b b5 9d 33 8a 80 02 18 1a 90 12 46 2a 2b 38 21 95 de 14 22 Data Ascii: %dWrEGK"F-gi#ge"-I[X)4j\|'5&>Xbd5'z=CRR[\vg?)b_njF9n6E.zodb1MZ<a/MGwpsr;"MS:3{$15[#o9a)l\|Nk3F+8!"
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: f7 f4 e4 0f 16 a9 70 8e 3d d9 76 ea f9 c7 f6 e9 e0 7d 4d d5 5d c9 65 a3 5a 5c 5e c5 01 76 e9 a9 25 9e c2 ea e6 71 ef b0 d1 75 6b a8 a0 b9 df 0a 25 83 ad 9e 89 1b b7 b8 5b 6a 30 5f ea 36 bd b8 4a 55 e7 bb a9 20 ab 44 ff 00 a9 ee a8 31 79 06 87 76 3c f5 23 67 59 bb f4 ca d5 ad f5 cd 9c cb 35 bc 9d b7 b9 ea ad 6e e2 23 11 b9 0a 3a 56 eb b3 26 a6 99 ad 33 56 d4 ac d7 b5 6b 72 63 4b 4b db 9b 37 2f 6f 29 46 4d 57 50 11 98 7e a0 88 ed b5 bd 46 d9 3b 71 cb ec ba bd ba bc 70 f3 cb ba 9f 51 bd fa 6f a6 ef 1e cd be ab 7f 6b 1f 6e 09 ca 24 9a e6 aa fb 43 5d 13 53 de dd 5e 6d 37 12 ef 36 33 dd ea b2 c5 67 3d c1 ed 5a c0 ba 66 b9 0d bc 4e cc 91 db aa ea b7 12 81 56 08 87 a8 35 59 b1 ce 96 db 8d e3 9a 8e 43 a8 74 ac a5 70 5f 40 62 3a 72 49 09 ae 9e 92 53 a7 b9 77 2c 2e Data Ascii: p=v}M]eZ\^v%quk%[j0_6JU D1yv<#gY5n#:V&3VkrcKK7/o)FMWP~F;qpQokn$C]S^m763g=ZfNV5YCtp_@b:rISw,.
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 3a 38 f0 d4 29 f5 1b bb 12 2a af 44 4e 29 cc 8b 41 f0 9e 68 cc b7 96 3c 91 c1 64 82 ba 34 37 d3 43 56 40 18 59 a9 c5 01 a8 c3 21 1c b5 3f ab e8 b6 94 68 d6 8c 49 4d b5 8a 60 29 82 6d 51 78 33 b4 84 d8 36 84 55 5c a1 1f 16 53 c5 47 82 db a7 15 00 f6 3f 11 59 9c 4f 25 b7 05 f9 90 cd ee 30 86 24 37 05 9c 49 84 68 37 95 10 46 13 cf 20 a4 92 76 93 8a ba 54 5e a2 7b e5 d6 93 90 4e 0d 8d 84 c5 54 6d c5 7a 29 4c 13 1a 33 58 ca db ae e4 56 c5 92 6d 24 89 69 8c 66 33 46 97 1a cc 15 4c bc a7 1f 04 7b ef 38 9d 01 b2 63 34 f1 0e 69 ef c6 e4 0f 56 f0 fa a7 48 63 4f bc ed c8 54 40 c5 38 ca 24 05 15 de 9e 64 7d 34 7b 87 e5 ad bd 46 83 90 58 86 fb aa d1 9e ee 4a 7b db 93 81 35 90 67 9a bc 03 9c 32 40 43 6b a9 29 a4 10 67 30 8e 0d e2 a7 14 d4 34 64 77 ac 0a 08 63 aa 51 60 Data Ascii: :8)*DN)Ah<d47CV@Y!?hIM`)mQx36U\SG?YO%0$7Ih7F vT^{NTmz)L3XVm$if3FL{8c4iVHcOT@8$d}4{FXJ{5g2@Ck)g04dwcQ`
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 00 03 01 01 00 00 00 01 00 11 21 31 41 51 61 71 10 81 91 a1 b1 20 c1 d1 f0 f1 ff da 00 08 01 01 00 01 3f 10 28 6e 25 31 19 6f a9 60 07 2c 40 b0 c0 34 6d 22 70 a4 6a 63 d4 51 2b 30 f5 96 62 0e 00 10 85 44 04 59 d8 dc 06 95 c3 11 52 8e 22 65 0e d2 86 13 00 d4 f0 40 c5 48 30 4c e0 b8 b6 a0 62 8f 98 08 c7 13 2e f6 cb a4 e9 4e e2 58 4e 20 86 95 27 48 46 c9 98 67 1c 66 14 da 38 cb 15 8c 50 ce d4 96 0b 24 0b 25 27 14 b9 26 63 e2 98 31 6c dc 19 dd b8 5d ee df 81 50 12 3e f9 65 9d f3 09 a8 33 2e 74 0e 04 a1 60 2d 96 81 78 7c b1 d2 f1 f6 49 24 ec d3 1e 16 2d 6d 71 32 07 6c 18 b9 17 2b c2 64 0a 12 fc 92 97 10 30 c9 8f 22 5a 4a 8f e5 10 e1 14 8a 05 ee 02 8b c2 18 b6 18 00 46 4c 8e b8 e6 12 24 58 94 88 16 ce 08 36 af 3d 41 43 7b 82 e8 54 56 04 a0 88 d8 04 6e a8 63 70 Data Ascii: !1AQaq ?(n%1o`,@4m"pjcQ+0bDYR"e@H0Lb.NXN 'HFgf8P$%'&c1l]P>e3.t`-x\|I$-mq2l+d0"ZJFL$X6=AC{TVncp
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 1e fd 4a 2c 08 0a ab db cc 24 a1 37 88 23 8a 40 58 d5 0d 62 0a cc 18 ce 41 63 1a f2 e0 1c 2c 90 b2 98 80 5c 40 b0 ea 24 0a ab 25 62 76 d0 48 4c 00 a6 d9 94 b9 8f 51 e2 66 f4 be 7e 1b 2b 35 58 b5 72 e8 7f a1 15 ff 00 2f fe 99 9a 5a f2 97 fc 8d 33 9b 89 19 28 09 40 ac 8c 74 e9 19 7b 25 46 26 3f 5a 92 64 0e 65 63 28 70 b3 51 ab a1 17 2c 6e 0c 15 05 6c 10 b1 4a 3b 12 5d ea a1 1a 58 18 b9 c4 31 91 bd 16 be 29 97 f6 5e f4 0c 24 b0 8c b2 09 cf f5 61 4a 30 69 1f 82 5b a9 a5 af 11 be 70 51 d4 0c 38 b0 65 a6 d1 01 70 80 c0 52 30 d6 8c 1f 7e 48 5b 82 f4 cb ae 5b f6 cc ea a0 66 8c c2 a5 32 9c 23 15 2a a9 b8 71 b8 dd 5b fb 92 b3 57 82 cb f6 70 2a 53 40 bc 5c 20 a3 14 bb 9a ed 2b 8a 0f 1a ea cd f8 86 be b0 21 d1 ff 00 72 d6 97 94 c3 30 7d 53 9e 33 1e 92 29 3d 29 90 88 Data Ascii: J,$7#@XbAc,\@$%bvHLQf~+5Xr/Z3(@t{%F&?Zdec(pQ,nlJ;]X1)^$aJ0i[pQ8epR0~H[[f2#q[WpS@\ +!r0}S3)=)
2024-12-17 10:52:00 UTC	1369	IN	Data Raw: 09 31 ea d6 12 26 09 1e 52 bf 4e f6 02 4a e5 c0 ad 93 b9 1c fd b1 a3 9c d5 89 7f b2 97 64 1e 90 a6 84 b5 2f 4c f2 c6 44 a6 01 d2 61 9a af fd 9b fe a2 22 0c 63 1a 11 32 4e bf 1b f4 83 18 7b 33 1e 89 62 cc b8 8e 57 48 2c ee 15 b7 3e bc 81 69 f8 44 6e 3f c0 0c 10 57 dd cb 89 0f c4 71 1c f4 8a 08 79 c6 4a ec 1f 0e e8 c6 bb 2e 36 54 be 4b 0c ef 76 9e 02 08 fa 46 ab ca a4 a8 63 c6 25 c0 6b cb 18 3b a6 ae 37 ca 43 87 0b 8e 50 04 cc 9d 19 95 15 1f 9c 17 5a 5c e9 2d bc 31 45 88 26 31 33 b7 a7 e6 8b 6f 07 3f 00 7a d6 19 5a c3 7f 60 9a c0 bd 7a 99 cf 94 97 d4 2f bf 97 b7 c6 8c dd 9b 25 93 8b e9 1d ec c0 03 b1 04 32 25 fa a3 09 d3 33 25 9b 81 42 cf df f0 65 82 ac 3f 98 9c ae 3f 86 85 19 8b 2a 02 15 5c aa 4e d7 d1 13 bf d2 53 f4 ca 50 8a 14 6c 02 da c4 ad ca 0a 80 a6 Data Ascii: 1&RNJd/LDa"c2N{3bWH,>iDn?WqyJ.6TKvFc%k;7CPZ\-1E&13o?zZ`z/%2%3%Be??*\NSPl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49855	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:00 UTC	375	OUT	GET /movies/12321158916-poster-Wineville.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	908	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:00 GMT Content-Type: image/jpeg Content-Length: 37227 Connection: close Last-Modified: Mon, 16 Dec 2024 04:38:13 GMT ETag: "916b-6295bbf933223" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVfU8JxXU5WYbsv2SuHVEDtXRSjbtSgXA1csLbBYCn39VgPyhCQ7YYLa4okrCpgHRmAAr9dpxtaYenpdBUZx4ALwdZJiglPD1ooR9R%2FdyXQF7YpTvFTaKnTRgJSSfc4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c796b261a17-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1803&min_rtt=1796&rtt_var=687&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=953&delivery_rate=1575822&cwnd=127&unsent_bytes=0&cid=81af71fd207faf9e&ts=455&x=0"
2024-12-17 10:52:01 UTC	461	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 00 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 00 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 24 77 73 ba 5c Data Ascii: JFIFC!"$"$CJ$ws\
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: bb f3 27 39 ad 97 2d 35 d7 2d a4 c8 31 92 c4 57 6e 3a 38 55 a9 5c c9 cc c8 b3 26 ef 77 bb bd dd 5d a7 3c c5 4a 8e 9d a3 de 74 6f 9f 3b e8 f8 5a 3f 3b e8 7c 01 d2 ae 45 8c f9 e3 4c d9 ed 53 51 d7 a0 b8 9c b9 69 07 7a 1a 9c 8d 5c 8b 2b 58 bf 9d dd 8f 2b 5e 56 b3 90 ad 6e ac aa 5a 36 59 76 d6 ea c8 fe 6d 40 a4 b3 fe 8f 8f ac f2 3e 8a bb 44 88 a4 8a ca 56 2b 57 3c 8c dd 9f 5d 44 78 ae 62 f4 76 1a 5b 96 82 a9 62 67 c0 33 26 3a 0a bd 71 4e f1 2a 54 4c 81 70 8d f2 78 8e 82 a5 61 12 97 b8 3d c8 94 4a f2 62 75 60 e5 13 cb 65 8d 73 d6 ad 7b 11 70 76 1a 6c 73 e8 13 92 a1 9a f0 29 37 21 41 51 2a 36 e5 a8 d7 82 61 c2 d2 90 20 79 c1 bb a0 44 81 3a db 63 f6 08 0f 38 77 8e a3 3c 29 ea a8 33 11 79 d8 be 87 28 b0 56 14 f4 22 6e 59 f0 9c 4d 4c 1b a8 fd 0c 68 5f 3d 6e 9c 6a Data Ascii: '9-5-1Wn:8U\&w]<Jto;Z?;\|ELSQiz\+X+^VnZ6Yvm@>DV+W<]Dxbv[bg3&:qNTLpxa=Jbu`es{pvls)7!AQ6a yD:c8w<)3y(V"nYMLh_=nj
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 46 c0 2d a0 9d 5c f6 aa b7 ae d1 8b 57 96 49 f6 8c fe a7 56 b9 9d 8d a0 57 bc c1 74 e8 e9 03 02 b1 3c 45 62 2b b3 3a 7b 80 28 83 64 ab d7 e5 5e e0 f6 d0 d5 e6 ee 71 dd 3e b5 25 39 72 3c 39 d8 ea fb 67 99 87 3d d5 a5 b3 fc f3 d5 ee 11 67 96 d5 7a b2 c1 92 04 11 5c 2f 33 a5 7c 3a 41 a2 56 cb 36 9e 10 a5 a3 da e3 75 b2 72 3e 8e 6f 56 2d 1e 6d 3a 92 31 f1 dd 79 9e 77 7e 7d f1 1e c8 fa 9f 9b 32 c9 68 cd 72 5e 85 11 a3 4c 2a d5 82 75 81 56 9c e0 0a 49 89 db a0 f0 82 2b 11 4d 94 da c6 98 f3 3a f0 20 cd 7d 2b df e5 5b ac c7 e9 5a 53 e0 83 d8 a8 ac be b1 f3 5a 30 fe c4 34 39 e9 a2 8a 66 74 db 11 e8 22 74 8c c7 0d 94 4d 32 06 9a b0 9e 73 5a 44 a5 b2 0b b4 14 7d a4 1c 59 a6 3d d6 38 e3 36 4b 62 ed 4e 8b f4 4f 23 42 1e 84 63 5a 89 92 a7 cb f4 2b 95 72 7e 89 88 d4 bd Data Ascii: F-\WIVWt<Eb+:{(d^q>%9r<9g=gz\/3\|:AV6ur>oV-m:1yw~}2hr^L*uVI+M: }+[ZSZ049ft"tM2sZD}Y=86KbNO#BcZ+r~
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 51 84 38 2a 05 39 51 57 b2 2e 9d 6e 92 95 5d 46 4e 8a d4 e2 82 b1 a3 d8 fa c4 99 ac 62 95 73 56 36 eb 2d cc 36 71 47 2d fa 23 42 27 9b 4d 0b 54 f3 45 02 de 4f 21 8e d1 24 13 da 72 c8 d5 80 d4 53 15 36 88 6f 6e 23 8e a7 91 de 45 8f 0d ee 14 c9 8a 6f 73 24 6a c5 d7 52 3e 3f a3 d5 6a 69 52 94 52 26 69 22 a4 b7 71 44 c9 25 08 6a e1 d2 04 9a ee 59 aa 30 24 7b c9 3e f2 dc 47 1b f9 19 aa d6 ea ee d6 a5 bc e4 69 ef 1f 01 f6 7c ab 34 4d db 03 97 52 b4 3d ac 80 6f 70 76 76 e8 83 f4 d8 d2 a7 49 18 cc 68 36 86 00 2b 4a 54 e8 26 6b 95 94 4d 75 8a 96 78 ad 11 b7 95 96 d9 98 45 68 4c 1e 2a 79 31 16 5a 42 b1 99 26 b9 40 2a 20 69 41 99 63 4f 2d 05 1e 59 4a a2 b2 90 aa b9 2e 3d cc 31 58 a4 19 a4 81 b5 e3 2d 5d 63 51 8a 45 ae 85 72 57 69 05 b9 cf 8e 6b c5 15 04 a9 10 b5 61 Data Ascii: Q89QW.n]FNbsV6-6qG-#B'MTEO!$rS6on#Eos$jR>?jiRR&i"qD%jY0${>Gi\|4MR=opvvIh6+JT&kMuxEhLy1ZB&@* iAcO-YJ.=1X-]cQErWika
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: ac f4 42 9e 9b b9 f0 5f fa 92 cc 98 20 97 6a f4 a5 ce d0 f3 97 97 2b 31 e2 f9 1b ba bf 81 ad 6e c6 30 f9 02 49 3d dd 6d 8a eb e9 1e 2b 22 bf b5 3a 52 36 f2 43 1c 26 71 fa 4b 77 7b ed 2f 2e a7 96 76 e1 38 c9 f9 56 e3 38 f6 b4 e5 fd 4f 04 96 d0 c2 d1 72 16 37 b6 f2 db 48 49 57 48 e2 e5 2c e3 e2 2f 5e ee 4b 73 c3 5c cd ca d8 c1 57 7c e5 cc 82 6d e4 72 ae 09 93 75 27 2b d1 a4 93 5a f2 66 87 e4 5b a1 9c af 1f 36 8b 69 6f 6a d2 ba 1b a9 50 25 0e 2a f5 ec 38 df 4e 71 72 8f 52 70 d2 71 b2 ff 00 c7 43 af 5c b9 8b 9b 82 df f5 9c 1f a3 a6 d2 3f 53 71 37 57 d7 76 1e 93 b5 41 c6 dd 27 18 39 0f 51 44 69 ef 6e 2e 99 9b 14 ac 75 5f 75 30 93 32 9c 9f a1 c7 d2 da de 79 6a 0e 28 32 89 22 b2 e4 27 e4 dc 87 95 d8 f1 be 9c bb b9 8e db 88 e3 6c d3 98 be 84 f1 bc 77 2b 79 61 77 Data Ascii: B_ j+1n0I=m+":R6C&qKw{/.v8V8Or7HIWH,/^Ks\W\|mru'+Zf[6iojP%*8NqrRpqC\?Sq7WvA'9QDin.u_u02yj(2"'lw+yaw
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: f9 a4 aa 89 72 29 d6 c3 43 af 7d 91 dc a2 89 27 15 64 a5 69 91 b3 42 12 16 c4 e5 4a cc 70 7a b5 31 4d 79 2c d5 62 9d 99 73 c6 1c 93 c9 29 49 9a 77 ed 65 15 ee a2 28 a2 8d 8d 31 5c 0c 4b ef b2 32 4f e5 44 a6 97 27 a8 e5 c2 22 e5 1e 49 39 2e 09 66 74 39 6f 6c d4 36 5f b9 77 51 34 f6 72 2c 6f b2 5d a5 91 40 de 5c 0b 0b 7e 05 0f d9 24 a0 89 64 bd 97 04 9f 92 4f 4a b2 2e fb 37 4e 8b af 65 0f d8 dd 17 25 cb ec df 65 b7 26 e4 b3 2e 20 26 97 26 26 b5 0e 4f d5 af b2 59 34 3a 1e 47 2d cb ae 49 af a3 7b 65 79 2c 7f a3 6e cf dd ab ec 94 a7 ab 6e 0f 5d 3e 3b 7a 91 b3 d4 1e 66 4f 23 6b 71 69 6b 63 54 45 2f 06 24 a5 2d cc d8 9c b8 44 62 d7 23 82 a3 56 f4 5c 60 a8 c6 d3 de c6 41 ea ef 77 ee 9e 79 78 67 a9 25 bf d8 9f d8 b3 c9 ec c6 f7 b2 8a 2d 8a c7 b0 8e 9b 1d 7c 99 26 Data Ascii: r)C}'diBJpz1My,bs)Iwe(1\K2OD'"I9.ft9ol6_wQ4r,o]@\~$dOJ.7Ne%e&. &&&OY4:G-I{ey,nn]>;zfO#kqikcTE/$-Db#V\`Awyxg%-\|&
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: df da 3b 63 28 45 fd 8d 90 e8 e0 f1 ea 93 17 f1 af 91 ea ef 6b 92 db e4 73 49 17 be c7 23 b3 13 6b 81 a4 f7 20 a2 91 19 7d ee 41 45 ad d0 dd 6a 8c 59 2a 96 f6 5b c6 47 24 64 ac d7 be c8 bb 1b 6b 82 15 7b 8f 4f 84 36 fc 8b 76 63 c1 ea ee 2c 17 26 af 83 0c 22 b2 38 3e 4e a3 a5 8e 4d fc 98 31 b5 fc 73 5c 1d 56 37 1d 87 5e 59 4a ec 94 45 1b e1 14 ae 9b 1f 1b 09 78 34 2f 04 62 bc 72 38 bd 5b 9a e3 54 99 99 c2 50 d3 43 8a d1 ae 88 fc d7 e8 79 e0 bf 12 19 a0 e3 68 f5 e2 88 e1 d5 e4 f4 f1 c5 19 23 ab f1 3a 64 b2 bd 32 32 62 d4 b4 40 e8 d7 f1 b4 fc 31 e4 96 3e a3 e3 e4 ea a2 e2 d6 58 f8 ff 00 63 2b 6a 1a a2 2c ae 3b b4 64 5e ab 4e 51 d8 9a 51 9f 25 21 d2 56 c8 34 a9 93 9b a2 3a b4 ee 47 96 63 83 9b d4 28 e8 55 11 d2 62 d2 d0 e3 1e 24 3c 91 92 b8 f0 68 d4 4f 1a ff Data Ascii: ;c(EksI#k }AEjY*[G$dk{O6vc,&"8>NM1s\V7^YJEx4/br8[TPCyh#:d22b@1>Xc+j,;d^NQQ%!V4:Gc(Ub$<hO
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: f8 dd ea 37 af 69 2c 69 bd 48 d4 2d 4d 6f e9 17 f2 36 90 b6 7f a2 72 a2 c7 2a 27 93 62 59 59 dc a1 cc 94 cc 3d 34 f2 bf c1 83 0c 22 e9 19 1a 71 d2 75 3f 4a 92 df 17 fa 1d c7 66 6a f2 63 d5 2d d2 d8 e9 f0 ca 7c 18 e1 18 c4 73 b5 51 36 7b 0a 56 2d 96 e4 b2 34 46 5a bf 45 a1 c8 6c 94 e8 96 51 f5 11 e0 96 53 b8 61 c7 2c ce 91 8b a5 86 2d f9 24 f4 a3 0c 7d b6 68 6f 83 4a 5c 99 ba 7c 39 b7 94 45 d1 f4 8b 98 9f e2 c2 ea 0b 61 c6 97 b1 1b a4 4e 3f 1c 89 a2 32 52 e0 e5 12 7b 51 8b 64 2d ca f4 d2 bc 92 99 29 b2 53 75 6c 9e 66 cd 46 a2 ce 8b 17 67 1f e5 fa 47 1c b3 3f c0 aa 08 79 52 f2 4f a8 4a 6a 35 c9 2c cb 93 4e a9 36 ca 50 dd ed 64 a7 a2 37 f0 61 93 f2 f9 26 d1 26 b1 b5 1f 2c 9c fb 74 a8 6f da a8 82 72 76 c4 f7 bb 1b a2 2f 6d 84 59 27 44 b3 26 ea ce b3 3c 5c aa Data Ascii: 7i,iH-Mo6r*'bYY=4"qu?Jfjc-\|sQ6{V-4FZElQSa,-$}hoJ\\|9EaN?2R{Qd-)SulfFgG?yROJj5,N6Pd7a&&,torv/mY'D&<\
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: ea 31 77 db 56 74 39 32 66 86 a9 12 6c 52 a3 2c 53 76 62 e4 d1 a5 95 63 e2 91 04 4b 7f 4a 1e c3 8d 90 69 6d c8 a9 3b 13 4f c1 2d a2 7b a8 c3 1a 89 9b dd 2b 22 9d 9a 54 56 e8 ee 38 ef 22 5a 73 46 e2 c5 89 99 f1 3c 8e db 27 0e 9f 14 69 ee 74 7d 5e b9 69 5c 10 76 5d f9 31 49 dd 9e d8 70 37 c3 47 81 7e 7d 1a 6d fa 24 c6 89 d7 09 59 87 1d 91 69 cb 4c 49 46 30 56 6a 73 89 0f 3a 48 2a 46 7c 7b d9 ee 51 a4 8d 72 4e 99 f5 08 39 62 72 8f 83 e9 b9 dc 72 38 4f c9 93 1d 70 67 f6 c9 48 58 f0 e5 6d e4 7c 0f ab c5 82 3f b3 03 0c fb 98 d4 90 c8 d7 04 61 b6 e7 83 fa f5 91 4f d1 ad 44 96 98 fb 44 e4 e3 54 2d 4f 83 45 aa 64 52 44 da 89 d4 cd f6 ad 3d bc 9d 0c a3 2b 87 fc 8e 97 23 9d e3 9f 25 53 71 12 4d 51 2e e7 4b 37 5e 09 f5 f8 21 0d 3e 48 4f fc 98 b8 d1 8f a6 d5 bd 11 e9 Data Ascii: 1wVt92flR,SvbcKJim;O-{+"TV8"ZsF<'it}^i\v]1Ip7G~}m$YiLIF0Vjs:H*F\|{QrN9brr8OpgHXm\|?aODDT-OEdRD=+#%SqMQ.K7^!>HO
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: fa ad a5 ae 25 e2 a7 e6 d1 00 78 1e 75 13 ed 4b fe 5b 83 86 8a 01 2e 95 9f 63 96 9d cc fa a9 82 3d 77 79 9d 14 84 4f 96 e7 35 de 18 59 ff 00 da 95 cd 92 ac da 0f fd 3b ff 00 88 0b 6e 94 c3 49 97 39 8d e1 cd 4c 87 32 79 71 df 44 d6 d4 a8 e7 06 0b 5a 09 d0 6f 7d 61 4c d8 c8 b8 fa fb 39 58 c3 1a db 42 86 1f cc 3e 15 cc 41 77 74 45 c4 93 93 25 73 1c f6 53 70 4f 7f 18 b4 38 26 bd 95 51 24 1c 20 44 dd 38 43 89 aa 2d 2b 19 08 59 27 a1 0b 2a 16 9b c3 69 b1 ce 24 c6 02 e2 bc b4 1e 21 a6 59 ef 34 f9 ab 18 d9 fc 56 cc 78 64 80 48 78 d4 7d 3e aa fa d3 f9 d4 38 75 db 32 5a ef fd 80 77 49 f6 39 e2 7c b7 63 5f 34 e7 7b eb 50 f2 0e 90 83 c5 36 b7 08 1e a1 73 23 6e 9d 91 81 32 ba 2d 65 65 b2 54 e4 2b 98 32 35 0b 20 85 e1 77 c9 00 c0 1b 73 49 69 71 8b a1 50 73 65 e1 ec 0f Data Ascii: %xuK[.c=wyO5Y;nI9L2yqDZo}aL9XB>AwtE%sSpO8&Q$ D8C-+Y'*i$!Y4VxdHx}>8u2ZwI9\|c_4{P6s#n2-eeT+25 wsIiqPse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49857	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:00 UTC	353	OUT	GET /images/logo-light.png HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:52:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:52:01 UTC	902	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 68 6f 55 6b 39 6f 4c 30 4b 56 58 70 6f 59 62 4f 44 53 42 43 46 51 75 34 69 2b 57 65 58 72 48 32 77 43 43 33 37 37 4c 4e 6f 4c 47 6b 4f 70 63 31 39 4a 4b 69 43 58 79 37 36 36 6f 4b 55 61 31 4b 76 65 6a 63 37 35 43 6f 67 74 50 58 74 51 73 79 44 4a 33 37 30 35 39 2f 2b 4e 46 56 41 72 2f 6a 4a 4c 7a 6f 6f 57 41 49 2f 55 4d 3d 24 74 53 69 67 53 37 52 4e 65 51 4d 54 2b 56 4a 59 55 38 75 50 72 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: hoUk9oL0KVXpoYbODSBCFQu4i+WeXrH2wCC377LNoLGkOpc19JKiCXy766oKUa1Kvejc75CogtPXtQsyDJ37059/+NFVAr/jJLzooWAI/UM=$tSigS7RNeQMT+VJYU8uPrw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 32 32 33 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2232<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 42 45 50 64 44 43 31 6c 35 44 79 54 75 69 68 6d 42 4b 33 51 33 57 66 46 4c 72 78 69 71 45 50 39 47 78 75 77 5f 51 45 73 70 5f 5f 62 6a 51 41 62 4c 6c 62 6a 30 37 6c 2e 68 45 67 36 51 6f 47 68 32 50 5f 51 41 38 37 6a 4d 6b 67 4d 34 44 72 63 4a 64 69 76 76 70 48 33 74 6e 32 37 61 59 6b 4a 6d 4f 31 78 68 62 45 61 30 75 4d 48 32 6d 48 70 57 4a 6c 56 54 4d 55 50 37 65 71 39 4d 41 33 6b 49 54 47 62 68 66 42 63 6a 44 71 49 4c 4b 55 4b 4a 39 32 33 46 54 4b 77 55 59 52 64 51 73 56 41 42 4a 52 43 4b 38 43 43 65 43 36 69 6c 71 65 36 77 4e 64 31 6e 71 36 41 5f 41 61 72 31 56 53 74 71 47 63 69 52 46 37 57 47 34 74 4c 54 75 4f 46 71 50 74 6e 6d 6b 61 77 36 4f 6f 46 67 59 64 49 4a 41 6c 45 67 66 78 52 67 47 79 35 53 34 31 6d 6c 4e 47 77 77 32 46 73 65 75 44 42 68 4f 74 Data Ascii: BEPdDC1l5DyTuihmBK3Q3WfFLrxiqEP9Gxuw_QEsp__bjQAbLlbj07l.hEg6QoGh2P_QA87jMkgM4DrcJdivvpH3tn27aYkJmO1xhbEa0uMH2mHpWJlVTMUP7eq9MA3kITGbhfBcjDqILKUKJ923FTKwUYRdQsVABJRCK8CCeC6ilqe6wNd1nq6A_Aar1VStqGciRF7WG4tLTuOFqPtnmkaw6OoFgYdIJAlEgfxRgGy5S41mlNGww2FseuDBhOt
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 43 68 53 49 75 4e 49 58 54 37 79 55 35 45 44 52 47 4f 34 6b 74 48 53 56 64 54 4b 34 31 55 61 75 79 32 51 55 66 30 51 5a 70 4f 42 79 35 57 50 31 33 5a 32 66 67 6e 43 47 4d 49 4d 77 34 4c 4b 72 4e 76 6c 6f 36 7a 4e 57 68 47 51 4e 4c 49 6e 65 33 6f 43 6a 47 33 4b 6b 62 70 51 42 68 77 4b 66 38 54 37 33 6e 69 4f 47 33 31 30 42 6f 43 59 4f 4a 53 47 2e 32 59 47 33 73 54 74 4d 56 76 47 35 6f 32 41 2e 4a 61 6c 6a 65 4e 32 4a 71 51 4e 61 51 4f 5a 54 68 74 54 32 31 51 49 71 4c 6e 33 47 53 30 47 63 63 58 54 59 2e 52 44 76 57 49 33 79 73 56 75 58 67 47 77 54 30 4a 6c 6f 68 6f 61 52 70 6b 6c 61 34 49 73 42 30 6b 73 6a 76 55 6b 41 46 4c 31 78 4c 46 5a 43 4a 50 75 6d 7a 46 73 39 64 30 61 66 39 4a 44 42 7a 51 37 42 47 51 6f 69 4f 6a 4c 6f 30 4e 49 59 76 5a 65 4d 33 6d 6e Data Ascii: ChSIuNIXT7yU5EDRGO4ktHSVdTK41Uauy2QUf0QZpOBy5WP13Z2fgnCGMIMw4LKrNvlo6zNWhGQNLIne3oCjG3KkbpQBhwKf8T73niOG310BoCYOJSG.2YG3sTtMVvG5o2A.JaljeN2JqQNaQOZThtT21QIqLn3GS0GccXTY.RDvWI3ysVuXgGwT0JlohoaRpkla4IsB0ksjvUkAFL1xLFZCJPumzFs9d0af9JDBzQ7BGQoiOjLo0NIYvZeM3mn
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 42 4f 54 47 31 53 54 51 51 4c 36 73 65 74 36 37 4a 4b 70 54 33 34 74 55 7a 70 62 70 6d 45 7a 2e 37 58 34 36 76 48 4d 44 4d 66 51 4e 53 5f 42 55 73 4d 72 64 76 48 64 44 58 39 56 67 56 46 59 49 31 72 58 55 7a 48 4f 6b 63 52 44 31 38 76 32 76 6a 68 4a 6b 6c 71 36 77 47 54 59 52 67 57 58 48 67 53 41 76 61 68 77 67 71 43 6e 50 39 63 69 33 73 6d 7a 65 69 56 6f 46 37 5a 63 49 49 72 31 31 6c 45 48 44 38 55 46 7a 32 47 42 79 35 6a 75 6d 58 52 62 70 63 6a 6a 79 4e 74 68 36 58 4f 74 36 6c 45 55 51 54 31 4f 2e 38 71 65 38 6b 6f 30 46 76 4e 34 6b 70 6f 71 50 46 6e 72 5f 6d 53 2e 2e 6a 62 7a 41 42 46 49 4e 6a 72 34 67 32 73 6e 6f 37 54 6a 77 5a 52 66 50 54 6d 75 39 48 59 54 57 45 63 68 6c 68 57 42 36 59 70 55 76 4d 57 47 6b 4b 4d 39 4b 54 41 36 70 6b 71 5f 6e 54 32 46 Data Ascii: BOTG1STQQL6set67JKpT34tUzpbpmEz.7X46vHMDMfQNS_BUsMrdvHdDX9VgVFYI1rXUzHOkcRD18v2vjhJklq6wGTYRgWXHgSAvahwgqCnP9ci3smzeiVoF7ZcIIr11lEHD8UFz2GBy5jumXRbpcjjyNth6XOt6lEUQT1O.8qe8ko0FvN4kpoqPFnr_mS..jbzABFINjr4g2sno7TjwZRfPTmu9HYTWEchlhWB6YpUvMWGkKM9KTA6pkq_nT2F
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 71 33 49 73 45 51 4b 4e 35 44 57 5a 6e 4a 73 68 37 70 34 70 61 54 5a 41 69 2e 54 33 41 74 79 50 64 79 32 42 5a 74 70 69 41 5f 74 69 79 79 34 36 68 4c 42 72 67 56 64 76 69 5f 54 43 31 43 48 45 68 46 74 52 5f 65 45 4b 43 54 5a 62 49 4b 65 48 65 46 54 2e 56 35 78 33 6b 48 51 4c 68 33 43 38 78 2e 61 71 4b 47 6a 6b 48 61 65 73 5a 70 71 6c 75 32 4a 59 32 46 67 64 6e 64 4c 55 72 70 6f 5a 66 4f 6d 30 6f 78 77 67 36 47 33 35 50 30 6e 53 34 55 6a 50 62 2e 74 6e 49 4f 5a 55 6c 57 56 6e 69 4f 62 62 58 65 52 78 57 61 70 45 36 75 77 6f 61 44 69 47 59 66 53 76 63 64 73 32 36 6d 39 79 5f 73 49 59 33 2e 6e 46 4e 51 50 4a 46 45 5f 74 62 34 53 59 5a 52 31 6b 6c 6f 54 43 5a 4a 50 59 4f 66 48 74 77 38 7a 45 67 62 2e 32 55 33 38 45 33 36 79 36 51 4b 55 32 30 58 4e 30 78 46 72 Data Ascii: q3IsEQKN5DWZnJsh7p4paTZAi.T3AtyPdy2BZtpiA_tiyy46hLBrgVdvi_TC1CHEhFtR_eEKCTZbIKeHeFT.V5x3kHQLh3C8x.aqKGjkHaesZpqlu2JY2FgdndLUrpoZfOm0oxwg6G35P0nS4UjPb.tnIOZUlWVniObbXeRxWapE6uwoaDiGYfSvcds26m9y_sIY3.nFNQPJFE_tb4SYZR1kloTCZJPYOfHtw8zEgb.2U38E36y6QKU20XN0xFr
2024-12-17 10:52:01 UTC	548	IN	Data Raw: 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 69 6d 61 67 65 73 5c 2f 6c 6f 67 6f 2d 6c 69 67 68 74 2e 70 6e 67 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b Data Ascii: exOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/images\/logo-light.png?__cf_chl_rt_tk
2024-12-17 10:52:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49858	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:00 UTC	1396	OUT	GET /images/logo-footer.png HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:52:01 UTC	903	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:01 GMT Content-Type: image/png Content-Length: 64833 Connection: close Last-Modified: Sat, 18 Jan 2020 07:03:51 GMT ETag: "fd41-59c64a915e3c0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5506 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJUf8t7MWIJUzw%2FxB2%2Bdr%2FiegRwtCkPlH9s9VNbKkeWoAvEHTbY405jp4tyxPzm%2FC1D%2Fur%2FmoscWb1fteKW2VuWIh9NpS34zrQ54ZmCGAunyc4tbtL2FJCle%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c7c0b054245-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2341&min_rtt=2335&rtt_var=887&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1974&delivery_rate=1225346&cwnd=187&unsent_bytes=0&cid=c0473fc8bf7b156a&ts=455&x=0"
2024-12-17 10:52:01 UTC	466	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 8d 10 06 00 00 00 16 72 48 24 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e4 01 12 07 02 18 a2 64 a9 c1 00 00 80 00 49 44 41 54 78 da ec 9d 75 98 54 d7 96 e8 7f eb 54 b5 e3 ee ee ee 10 dc 5d 83 06 02 04 97 10 3c 78 68 08 49 08 92 04 12 88 40 70 77 f7 6e 1a 0d ee ee ee d0 40 d3 5e 55 7b bd 3f aa c8 bc 77 df dc 99 3b 33 49 6e 26 f7 fc be af bf 5d 72 ce f6 7d 6a f5 5e 6b af 25 fc c5 69 dd 6c e5 dc 95 73 b1 f0 27 09 49 a4 80 df ec c0 51 15 52 26 ab ee fc dc ff 58 f2 3d dd 6b 9b Data Ascii: PNGIHDRrH$gAMAa cHRMz&u0`:pQ<bKGDXtIMEdIDATxuTT]<xhI@pwn@^U{?w;3In&]r}j^k%ils'IQR&X=k
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 1c 16 ce ba 40 52 4e 91 9f 01 fa 32 61 5d fc 03 eb b9 7c e8 7f 33 d0 59 3d a3 df 48 67 6d 2b 4b d9 77 5f 5b 3b f6 c2 46 57 ab 7c ab 8e ab f2 6a f5 d5 d6 65 44 48 61 4f 25 1b 1b 1b 1b 1b 9b bf cf 5f 7e 87 23 fe c4 d1 2a f1 27 68 23 c6 54 70 6d 4d 16 23 8f 3c 5b 5d 6f 32 af 92 0d 9e c2 ee 6b 3a 58 de 71 87 ba af f2 2e 53 3d d7 5d cb 40 d2 b9 8d 6b 1e c9 25 99 67 9f eb 03 a2 ac 81 bc 30 33 fd da b1 da 94 f4 ac ce a7 f1 49 02 34 b2 97 7c f4 2c 63 9a 37 91 bd 64 b9 3d 85 6c 6c 6c 6c 6c 6c fe 73 fe f2 3b 1c 6f b1 26 7b c4 93 3e 26 ab 35 d4 ac 36 01 cf aa 99 01 9e 40 4f 3b b6 49 09 a9 cf 1a ca 4a 1b d2 6a 1a d0 68 ab 09 39 89 e3 5d 66 b3 47 ba 52 34 51 13 2e e9 21 46 48 2d c9 79 af 61 86 72 4f 17 3f fd 86 70 5f b6 07 d9 0b cc b2 27 92 8d 8d 8d 8d 8d cd 7f c4 5f Data Ascii: @RN2a]\|3Y=Hgm+Kw_[;FW\|jeDHaO%_~#*'h#TpmM#<[]o2k:Xq.S=]@k%g03I4\|,c7d=lllllls;o&{>&56@O;IJjh9]fGR4Q.!FH-yarO?p_'_
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: ff 13 ec 74 3d 4e cc 23 dd a5 b6 59 ea b9 68 8d 94 ba 26 83 a7 a4 1c f6 d4 8e 9d 9a b0 55 0a 5a 5d d9 4f ed ca f5 dd dd d4 e9 a9 58 ea ee cb 08 6b 3e 10 65 8f bf 8d 8d 8d 8d cd 6f 89 2d 70 fc 27 e4 ba 71 33 27 aa 53 35 67 62 6e 4f 57 f7 22 d3 2c e1 dd c4 7e 9b 9b 49 6b 53 5e f3 14 3a e3 f7 c0 6f 9d 7f 9d 5c c5 1e cf d8 7e 64 5e a2 16 ca 9a e6 ee c7 aa 4c f8 bd eb 35 e1 dc 77 5f 00 f5 9a 26 1c ee 52 f6 1a 58 07 62 4b 26 e6 4f 5d 92 73 ee 88 c4 1e 99 22 a8 ef da 96 90 46 72 4b 49 53 de f3 13 5d 64 86 e7 b1 3b 1c c4 df 53 d0 fd 0a 64 94 a7 91 ab be 75 52 97 c6 a7 74 75 49 51 49 de b8 93 7b 2e a4 4b 9e f9 dd 87 ad 41 ab f9 04 9a d1 f6 0c b0 b1 b1 b1 b1 f9 2d b0 05 8e ff 84 f1 9f 8e ff 54 2c ee ea 0a 4d b6 d7 a1 d9 dd 0f 5c 03 64 cd b9 b1 56 2e bf 05 8e 6d 47 Data Ascii: t=N#Yh&UZ]OXk>eo-p'q3'S5gbnOW",~IkS^:o\~d^L5w_&RXbK&O]s"FrKIS]d;SduRtuIQI{.KA-T,M\dV.mG
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 67 62 0b 1c ff 43 de dd 3a fe 2a ca 86 24 e5 7e ce 91 ec 5b 93 28 db f5 11 1f ce fd 0a 97 de 32 0d 8b d7 48 51 2a db ab 27 11 b9 9a a5 48 f7 f2 29 30 a7 c7 88 9f 3e 57 a5 c2 7f b7 bc d0 50 35 6a f8 20 eb dd 57 0b fd d3 4a 09 e9 2c 29 74 6b ed 96 1c a5 87 ee c9 d2 45 7b 78 ba ba bf f9 be ea ad a5 f1 35 9c 8b a3 d3 64 f8 aa 76 62 ce 8b 5a ca 1e 29 1b 1b 1b 1b 9b 7f 26 b6 0d c7 6f 84 57 65 22 d9 5f dc 4e 9d 03 68 91 f1 8b d8 d1 4f 7b 0f dc 2a 0b e4 19 2d e5 fc 8b 03 b1 65 d2 d5 99 fe c3 91 14 25 5e 82 27 30 f2 74 be 35 22 f4 fa af 96 d3 2a e5 f9 e9 aa 56 a5 80 fa 0f ca bf 72 a7 76 fa 85 24 79 18 9c 7d 66 5b f7 9b 84 66 9e 9c b9 92 24 7e 92 18 65 3e a9 9c f5 fa 8d fb 07 43 ea 25 0c 3f d9 ac 5b 23 d0 07 3e 47 5e 0f ec 91 b2 b1 b1 b1 b1 f9 67 60 ef 70 fc a6 68 Data Ascii: gbC:$~[(2HQ'H)0>WP5j WJ,)tkE{x5dvbZ)&oWe"_NhO{-e%^'0t5"Vrv$y}f[f$~e>C%?[#>G^g`ph
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: bb af 48 5f 39 9a bc 4d a6 61 45 a3 c9 f6 f6 ee d6 ad 57 ae 5c b9 92 92 25 ea 66 3e 12 5d 99 7d 6c 95 74 32 b1 5a 7b f7 cd f8 7c 31 1d 9f ef b0 0a e8 33 77 fb 63 c3 5e 17 bb 5b 6a 77 7a 8a a5 ab 1c 56 17 18 6f 4f 69 1b 1b 1b 1b 9b 3f 23 7f b8 1f 8e 32 23 8f 7d a9 4a c5 64 6f a2 42 40 66 a4 fb ca 15 11 53 28 a7 c7 ef 87 90 a2 7e 2d 97 a5 62 b6 be d6 aa 65 ce ba bf 4c 4c e7 76 92 8b d5 94 93 bc 56 08 89 40 2a 72 03 c8 c7 a0 9f 71 83 c7 3a 42 8a 32 86 b5 5c 90 66 8e d3 ce c2 e2 b0 ea f9 2d 92 6f 75 b1 29 e4 ee ac 2b a3 b2 59 f7 fc ba 39 e6 fd f2 81 a7 ae 3b a5 bb e5 86 e9 72 94 c3 e2 38 71 9d b2 72 dc 51 e8 c6 ec c0 21 39 62 1f 74 7e f5 4e f0 dd e7 37 9e df e0 b2 f6 7a 71 b5 64 15 ed 7f 33 4b ed ae 28 d7 b6 95 43 10 5a fa 04 88 ab ff dd 76 7f f0 c1 5e 87 aa Data Ascii: H_9MaEW\%f>]}lt2Z{\|13wc^[jwzVoOi?#2#}JdoB@fS(~-beLLvV@*rq:B2\f-ou)+Y9;r8qrQ!9bt~N7zqd3K(CZv^
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: cb ae eb 69 4d ac bb b9 fb cb 03 fd d3 d5 23 34 f6 da e1 e4 9d 77 67 e8 fe b2 7a d1 9c 59 da 24 cf 15 18 56 27 c6 bd 4a 27 72 37 5f aa c4 36 ee 8e 9e e0 54 e3 fd 3e f1 bb e7 77 cf 9a e8 57 d9 b9 d4 31 56 bf a3 86 6e a0 92 54 71 4c 72 7e e7 58 43 6b a9 43 5b f2 e8 46 bf ab ce 34 7e c3 62 fc 5e e7 4b 58 6a 96 b8 6b 25 e9 17 70 ca 61 ad df e6 bc e6 ac 6e 75 5d 5a 3e e0 82 5f 4e bf 9c e1 8f 1d 61 d6 07 d6 07 f8 1c 88 69 0e 9f e0 31 c5 9e da 36 36 36 36 36 7f 26 fe 40 81 23 34 54 55 aa 95 9d 98 af c9 8b bc ce 4b 59 f2 a5 5c ef 9c 3c f8 42 60 0b bf 99 8e 77 26 56 94 8f d5 a1 5b 24 33 8f d8 20 d5 89 00 99 e6 73 e3 55 d7 e7 8f 33 c7 af 87 3e bd 02 45 4d 00 de c8 4a 49 0a 44 91 96 64 a0 95 80 83 c0 2d 90 62 be eb 53 f8 d2 43 00 24 23 2b 80 2c f4 7d 5a d6 97 66 91 Data Ascii: iM#4wgzY$V'J'r7_6T>wW1VnTqLr~XCkC[F4~b^KXjk%panu]Z>_Nai166666&@#4TUKY\<B`w&V[$3 sU3>EMJIDd-bSC$#+,}Zf
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 92 01 34 bd 56 d1 e5 c0 0a be a5 06 38 96 90 07 20 ae 81 a7 b8 d4 86 8b ed 63 72 f8 67 87 cb db 63 ce f9 37 81 d4 5d fc 3f f0 6c 84 9c d7 83 f7 ba 77 43 b1 3d c9 4a ba 87 10 94 23 7f f0 54 6d c1 b4 54 f5 fd 3d ae bb 56 76 bf 36 8e 31 b2 bb 78 94 7f 69 ff ea 4e 06 4d 79 53 24 66 47 c2 a9 c1 fb ae cc c5 81 e3 e5 7e 6f cd 8d 3d f3 6d 6c 6c 6c 6c fe 50 fe 0c 2a 95 45 de 44 33 78 95 25 f2 83 ef 3c 49 1f fa fc 07 77 6d 63 06 03 c0 3a cd 54 04 ea c7 64 4c a7 ed a1 41 60 e6 6b 58 e0 97 c4 ea 45 41 d0 f3 54 e7 17 90 6e 38 88 84 e2 13 52 b4 d7 55 50 a4 47 8a 76 d2 11 5e 66 4f 8c 64 0d dc 3e 10 f3 9a d9 70 26 e0 e5 3e 56 c1 b9 0d 2f f7 ca 6b 78 dd 3f 31 0b a3 40 44 7e 00 f0 8b b2 7a 02 10 24 41 ba 12 34 9b ee 93 b6 c0 23 99 c8 4a 90 f6 0c d2 a5 a0 0b 41 3a 01 1d ff Data Ascii: 4V8 crgc7]?lwC=J#TmT=Vv61xiNMyS$fG~o=mllllP*ED3x%<Iwmc:TdLA`kXEATn8RUPGv^fOd>p&>V/kx?1@D~z$A4#JA:
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 3a 5f d6 83 ae 92 3d fa 3e 48 39 fc a8 0e 4c d5 b9 d2 13 c8 2d 5b e8 0a 94 d4 b5 34 05 6d 23 53 29 0a 52 98 81 64 04 36 f1 1c 0b 64 0e f5 a8 0f fa 05 0f 68 0e fa 86 6c a4 07 0e 51 50 7b 80 df 20 99 29 4b 21 db e6 a0 b1 64 86 dc 77 42 6e 4a 77 a8 ef 97 b1 bd 7e 00 f7 2f c7 bd 2b bd e1 dc 8f 2f af c9 46 38 95 fc 95 93 e2 f0 e8 75 dc 46 02 21 a1 b2 c7 c8 40 f0 0c 63 33 53 41 a6 e0 8f 13 d8 c1 10 3d 05 1c d2 08 04 38 8e 4a 47 00 f9 5a c3 00 18 4c 2a 00 6e 48 57 00 2d c6 37 00 94 25 39 b0 4d 56 fb 7a 2f 3f 85 a8 cc 1a cd ab 88 5b f1 08 c9 c5 8d 83 b2 9e 25 96 db 1d 12 f3 01 85 b2 4c 97 62 d6 27 d6 27 59 71 bc 0e c8 21 95 6b f6 36 e5 3d 2b a4 e0 d8 b4 71 f3 9c 9b 75 f9 f1 93 d2 37 e0 a1 5c d8 98 32 ee dd e4 39 4d cc d5 8b c1 f5 1c b3 64 f9 c3 46 f8 3b 6a cb a0 Data Ascii: :_=>H9L-[4m#S)Rd6dhlQP{ )K!dwBnJw~/+/F8uF!@c3SA=8JGZL*nHW-7%9MVz/?[%Lb''Yq!k6=+qu7\29MdF;j
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 37 e7 da e2 09 85 cf fb 17 7b e0 fe 19 06 1d cc 5f c3 64 81 ea 59 d3 8f d1 4f 21 f5 54 ff da 5a 18 1c 43 65 99 66 01 cd a8 31 7c 03 9a 95 79 fa 12 28 8c 9f 76 02 26 49 1a bc 8e d3 26 f9 7a ef ed 61 e3 37 bf fa 37 f9 ec ff ed 5f ed 08 a4 05 cd 44 61 d2 6b 4f d6 72 80 bc 5c a4 2c 3d 88 d6 c9 14 95 40 6d 6d ca e0 2f 71 5a c5 3d 55 27 3b 17 b9 57 24 bc 31 fb 73 64 94 40 c7 7d 52 cf e8 46 23 47 2f 2b 69 cd b8 d9 05 37 5d 04 99 94 bd 75 8a b3 28 1b ec 25 f7 af 4d b5 6a 11 11 11 11 34 47 70 e2 b4 fc d3 0e 88 99 f5 60 49 12 f5 2f 14 50 24 e9 b2 b1 1b fc c6 fa b5 09 e8 fd 89 cb 8a 76 3b 8d 27 f0 85 ef b6 34 be 34 e3 6f 56 8f ea 11 7b 55 29 e3 15 34 e4 7a fa 14 f1 ed 9f 3e 4c 35 c7 31 ca 3f 47 40 db 29 5d fc 7b 26 ad 9e ec 74 97 03 9a c0 7e 09 f0 9f e6 bb 6d 8b 3d Data Ascii: 7{_dYO!TZCef1\|y(v&I&za77_DakOr\,=@mm/qZ=U';W$1sd@}RF#G/+i7]u(%Mj4Gp`I/P$v;'44oV{U)4z>L51?G@)]{&t~m=
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 68 d0 06 da 55 47 83 19 ad 8d cc 15 30 f7 34 a9 1e 05 19 ab b7 cc b7 90 be 62 e0 d7 a6 36 d4 4e 9e be 88 b9 01 43 df 29 50 dc 2d 30 96 c2 e7 dc 69 a0 fd 57 d9 ef 78 36 43 e1 7b c9 47 9a ed 10 92 cb d1 97 3a 20 cf d9 c0 2d 30 a5 68 0b a0 a1 fc a4 2f 80 54 a0 6d 80 29 54 22 13 50 12 d4 7b 8a e8 a6 26 05 d0 77 f0 3a 7b 5f 0f c0 31 ad cd 0d 99 ae 63 74 0d 21 c9 de e5 7b da 98 19 05 7b 24 5b 7c bf 17 a8 2b d9 92 fb bd 80 e7 f6 d2 fb 6b f3 ab ea 04 04 b1 9e a6 75 45 0d ba bf 30 e4 b1 63 7c 40 9b 80 1f c6 1e 91 63 8e 93 8e 4e a3 52 9b 44 57 f2 c4 9d c9 e3 34 33 4d 35 95 75 85 4c 34 95 de 64 f8 0d eb b1 47 95 92 de 7a c8 91 f4 e9 e3 db 3e bd 95 26 ad b3 b4 ff 2f 01 21 53 1e d2 97 0c e6 66 5f 3c d3 5d cd 13 03 82 53 33 50 27 e2 cf 2b 20 8f 37 d8 80 8d 8d cd 6f c5 Data Ascii: hUG04b6NC)P-0iWx6C{G: -0h/Tm)T"P{&w:{_1ct!{{$[\|+kuE0c\|@cNRDW43M5uL4dGz>&/!Sf_<]S3P'+ 7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49859	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:01 UTC	633	OUT	GET /movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	922	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:01 GMT Content-Type: image/jpeg Content-Length: 18267 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:05 GMT ETag: "475b-6295bc6470eec" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3376 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qMXKRuGfKSZpCN0hLE%2B4RoeDFk5ufysSQO2v%2BJee0AFK6u%2BvYSyAzfzYBOi7ZH5eLx8gPax6K%2FOFhVG8PAUV1JjNJbBlKCIF3xvra%2FJksV%2BQray9ussQ7rxsWp5Rr1c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c7d7b2c4321-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1555&rtt_var=602&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1211&delivery_rate=1789215&cwnd=248&unsent_bytes=0&cid=5a1f866151b4486c&ts=451&x=0"
2024-12-17 10:52:01 UTC	447	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 07 08 08 07 0a 0a 09 0a 0a 0e 0d 0c 0c 0d 0e 15 0f 10 0f 10 0f 15 20 14 18 14 14 18 14 20 1d 23 1c 1a 1c 23 1d 33 28 24 24 28 33 3b 32 2f 32 3b 48 40 40 48 5a 56 5a 76 76 9f 01 06 06 06 06 06 06 07 08 08 07 0a 0a 09 0a 0a 0e 0d 0c 0c 0d 0e 15 0f 10 0f 10 0f 15 20 14 18 14 14 18 14 20 1d 23 1c 1a 1c 23 1d 33 28 24 24 28 33 3b 32 2f 32 3b 48 40 40 48 5a 56 5a 76 76 9f ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b8 94 c4 f1 3f 4b 50 de 00 a2 c8 08 a2 Data Ascii: JFIF ##3($$(3;2/2;H@@HZVZvv ##3($$(3;2/2;H@@HZVZvvJ"5?KP
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 58 3d 07 8a aa 79 ab 10 f7 8e e4 40 e7 1e 74 70 7b d3 4e ba 27 49 ad 72 89 cc ce f6 31 b4 e2 ba 6a 7a 6c 9b 03 fa 3e 61 f4 f5 7e 5e ba 44 7d 82 a9 3d c9 00 fe 20 66 84 18 2e 9b 9b 27 56 51 07 76 a9 b8 60 1b f7 96 ea 03 c2 7c d5 90 91 44 d1 be 51 03 af 47 1b c3 36 43 75 4e a2 28 9c 3c 11 a1 8e ec 78 ee b6 aa 9c aa 85 f4 5c ba ef 1b 90 0f 07 68 a0 d5 4d 84 f5 69 cd 32 46 44 88 c1 15 00 ec d1 3a 03 00 e8 4f 2b d4 11 52 9b 2b 64 50 f0 3b 8a 47 08 aa b1 70 92 f2 0c a0 08 84 29 00 2a a4 4a a7 6f ca 6f ab aa 33 31 2d 7d 17 37 2c ea 09 b7 76 87 56 73 49 82 4d 36 12 1e 05 3a ea cf 61 e5 f8 a4 d8 73 f0 a8 db 47 e9 0d 2b 1b da 3c c6 fd b8 a8 95 2c f2 78 0a f2 2c 5f 24 88 d1 74 dd 48 2a 62 b8 8c 2d 8c ed 34 44 33 2d 47 3f be 85 97 a4 84 8f a7 e6 62 24 22 24 8a d6 ee Data Ascii: X=y@tp{N'Ir1jzl>a~^D}= f.'VQv`\|DQG6CuN(<x\hMi2FD:O+R+dP;Gp)Joo31-}7,vVsIM6:asG+<,x,_$tHb-4D3-G?b$"$
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 11 04 12 21 31 13 22 41 51 71 81 05 10 32 33 61 72 14 20 23 30 42 52 91 a1 b1 34 53 62 c1 15 82 40 43 73 92 f0 ff da 00 08 01 01 00 01 3f 02 f5 df 23 58 35 9c 00 4d b5 40 e3 41 20 4e 91 8c ed 38 04 25 89 c6 81 ed fa a2 f6 b3 b4 e0 13 65 89 c6 81 ed aa d3 c1 fb ad fa ad 3c 3f b8 df aa d3 c3 fb 8d fa ad 3c 3f ba df aa d3 41 fb ad fa a6 c8 c7 56 eb 81 46 d3 00 c2 f8 4d 73 5c 2a 0d 7d fd b8 93 39 1b 90 c5 49 26 92 38 eb 9b 6a 13 0d d7 b4 ee 2a da eb da 35 09 bb 20 28 e5 80 aa ac df b2 e4 31 0a f4 bf b2 e4 0d 45 53 25 90 02 db b7 6f 22 ea 39 a3 7a b0 38 e9 1c 36 53 de 0e bb 73 48 9e bb c2 d6 34 0d 6d 55 d7 06 eb 0a 62 7a a7 75 4f 24 ce d0 4d 34 70 2a 19 04 d5 a0 c9 6d 3c 55 da c6 78 26 e4 d5 6b 1e d6 3f 29 4e cd 9c 55 84 fb 7e 5e fe da f8 0e a3 ab 7b 82 1e 0a Data Ascii: !1"AQq23ar #0BR4Sb@Cs?#X5M@A N8%e<?<?AVFMs\}9I&8j5 (1ES%o"9z86SsH4mUbzuO$M4p*m<Ux&k?)NU~^{
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 07 02 13 df 4e 8c a7 f1 68 51 9a 48 c3 fc 93 83 83 a8 73 45 92 30 62 d2 01 4c 8d ef ec b4 9c 53 4d 40 5c 91 70 6d 2b b4 d3 a8 90 29 e3 87 af 69 ee 64 f2 95 5d 62 3c 17 c4 55 70 67 80 51 bc 32 ff 00 88 a2 0e ba 6a 17 48 1a e8 4e f6 2b 76 50 f9 55 a2 06 c3 03 48 f8 a8 86 a3 98 78 28 1f a3 95 ce 1b 8a b4 4d a7 a1 39 ab 43 a9 60 84 6f a7 e1 6e 56 89 44 a6 b8 55 36 d0 74 57 1d 42 14 32 98 a4 04 6f c7 82 14 ba 16 08 2c 31 1e a8 ca aa aa aa d4 e1 a1 78 da 5a bd 1e 6c 5d 70 e4 17 a3 ca 19 5b 87 17 28 6c d3 19 19 56 10 02 f4 69 eb dd 94 20 99 e4 36 e1 56 d8 25 3a 3b 8c 24 06 ab 6c 32 bb 45 75 84 d1 b8 a7 32 d2 f8 e8 58 ec c2 7d 9e 6a 45 ec dd d9 4f 82 66 3d de cc 90 51 b2 4e 1a 0d c2 ae 5a 4b 6e dc 7a 96 cb 30 6c 66 e1 ec a7 59 e5 65 0d c2 42 6d 8e 67 30 ba ef 24 Data Ascii: NhQHsE0bLSM@\pm+)id]b<UpgQ2jHN+vPUHx(M9C`onVDU6tWB2o,1xZl]p[(lVi 6V%:;$l2Eu2X}jEOf=QNZKnz0lfYeBmg0$
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 23 af 9d 14 01 97 41 0d 09 cd 18 a9 19 85 1a ec 68 b0 04 02 3b 18 55 36 58 c0 d6 cd 13 a5 6b 05 d0 3c 77 a0 d0 c7 02 45 46 e5 3d a9 e1 e1 d7 1a 0f e1 0b 45 2f 1b bb a8 99 3b dc fa d1 aa ba ee 34 0d e0 98 fb d5 c3 9a b2 b0 32 06 00 16 9a 03 5c 45 eb c7 05 69 35 86 b7 a8 0e 1f 54 23 6b 63 ae 91 41 71 ae 34 39 8a a7 59 23 73 9c 48 18 9f b2 16 38 76 57 ea a5 b0 b6 b7 81 a0 08 b9 3c d2 bc 57 46 3a b1 3c 6e 77 55 b6 39 64 81 c2 23 8f e4 6e 56 3b 1b ed 4e c4 16 c4 33 f1 50 c1 13 26 92 eb 40 02 80 27 47 a5 91 f4 f8 45 79 ab 33 b0 a7 8a 29 d0 03 5a 23 db 77 98 a7 59 8f a3 e9 bc 7e ca 37 60 de 2b 44 c0 2a 70 01 5a 31 a9 f1 4d 85 ef 8e 47 8c 9a a2 59 a8 c5 1a 38 2b 33 85 c6 02 e1 92 74 51 36 bc 4a 75 6e 52 f1 a2 16 97 3a a3 46 06 1b d4 12 06 cd 15 40 6b 43 4b 73 55 Data Ascii: #Ah;U6Xk<wEF=E/;42\Ei5T#kcAq49Y#sH8vW<WF:<nwU9d#nV;N3P&@'GEy3)Z#wY~7`+D*pZ1MGY8+3tQ6JunR:F@kCKsU
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: d4 83 2e cf ea 1b ed 0b e2 7e be 22 06 70 52 26 d4 1a 83 3f 73 99 6f c3 69 f4 27 e7 f2 41 83 ca fe 27 e9 e7 f8 f3 d1 5d 2f ad 4d a3 bc a8 30 4c 65 ab 99 62 d7 78 ce ed 56 ed 6b c4 f2 5c 1a 3d e0 9b 8d 0a b6 b0 63 19 77 79 fb 4b cb 1f 94 dc 56 a6 f8 58 92 14 d6 2e b0 f1 5c 16 f6 96 4e 96 17 06 a8 dc 68 a9 c1 20 0d 04 19 34 81 51 e9 9f 64 de 68 4c cb eb 69 35 8c da 28 ad 30 9e 62 b1 58 10 7a 4b 9b ed 7a 91 34 6d 1d 2e df ee 5a 39 52 cb 1a 5b d1 2c ec 0f 66 32 f8 fa 25 b6 13 15 64 66 3c 8f 98 9a 70 df c4 66 de 00 a7 7d 3a 30 3b cd 3a 1a cb 95 2a 11 b8 3a 10 65 e3 35 a7 f0 5f 53 4f 94 e0 f7 a4 ec f5 98 18 75 8c 1d 84 fd 1d a7 e1 e5 8b fa ef 3e df e9 1f b2 8b d0 23 d2 a8 83 71 04 47 47 a6 97 9e 8f 3d 26 26 af 8f 45 fc 57 d4 d3 e5 f5 67 c1 3e 66 0f 46 26 83 95 Data Ascii: .~"pR&?soi'A']/M0LebxVk\=cwyKVX.\Nh 4QdhLi5(0bXzKz4m.Z9R[,f2%df<pf}:0;:*:e5_SOu>#qGG=&&EWg>fF&
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 20 38 b5 45 bd 44 29 a9 2b b4 ae bf bf e6 26 91 60 ed 96 5d 57 36 3d 9c 5c 4b 8d 15 7b 4c ee 88 5e 63 95 87 4c 77 99 11 0d 6f f1 2b 51 c9 fd 6f 0a 1d 99 24 b2 9f 15 bc ac f5 98 15 e0 71 6a da a2 54 70 57 36 69 34 82 2e 96 80 27 07 b7 af 8a 87 ce 71 47 6b b9 65 a3 01 ac e6 08 96 1a 57 56 38 99 39 ac 4a 92 01 ba 66 4d c8 72 25 74 b8 31 a0 f7 95 c2 9e 59 3b c0 9e 52 5d d7 b7 18 88 23 ae 86 ca 97 b9 f0 44 98 bf ac 6c d4 55 4c 1b d7 88 e4 57 4b d7 c2 15 c2 09 d2 b6 8e 10 07 0a 73 ae d0 3b c2 65 b4 11 33 96 0e f3 3e 29 57 4d 63 d6 b0 3d a5 3a 5f bc 19 5a f9 9a 09 66 be bd a6 4b 45 68 66 fb fb cc 21 61 8b 9b 1a 03 b9 9a 17 55 d2 b1 52 94 86 06 4e 25 62 a3 26 80 57 cc ba 65 f4 86 ac 60 79 26 bc 60 bb d9 c4 c2 1e 5d 3d 65 57 1d 1c e6 53 15 94 83 42 f5 f3 00 ae de Data Ascii: 8ED)+&`]W6=\K{L^cLwo+Qo$qjTpW6i4.'qGkeWV89JfMr%t1Y;R]#DlULWKs;e3>)WMc=:_ZfKEhf!aURN%b&We`y&`]=eWSB
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 74 e4 6e e8 5d e0 6c a1 e8 25 6b 52 03 7b 37 8d 18 8e a7 71 99 60 b1 bf 11 88 8d de 4a cd c5 a3 b5 b3 e6 5d dc 6f 32 4b bb b1 08 e6 36 78 da 32 73 39 8c 3b bf a9 79 72 37 32 6e 89 95 35 8d f8 ed 1a 84 7b 89 89 ae aa e4 c4 ba 54 52 0f 07 13 2b a9 ba a9 9c 6d 29 5a 97 d9 85 f3 70 40 b5 82 67 d5 9e b1 e5 77 d0 9a 58 90 14 06 d0 cb c0 55 83 1a 39 bd 60 c5 82 14 6e f4 94 0f 61 ab ee 71 fb 50 7a f3 80 cc 1a 10 df 52 db ad 10 1c 63 23 96 3a 41 31 a3 7b e7 d5 d0 74 18 09 ba a6 e1 16 b7 2f 68 ae f0 39 92 1c bc 4c c8 b1 bb 20 9b 40 ef 23 85 5e f3 6b 55 6a fd a4 b5 4d 70 a8 82 b9 f9 c5 b0 6d 19 7f 70 f1 6d 73 03 2a 82 6f d5 cf 03 28 e2 65 b8 84 28 0c ed 55 17 30 ae 65 5b 2c d5 6b 3f b8 74 72 c7 cf 6b b3 50 0b 41 be d7 e6 b5 82 55 47 88 96 00 f2 61 8e bc f3 47 b4 49 Data Ascii: tn]l%kR{7q`J]o2K6x2s9;yr72n5{TR+m)Zp@gwXU9`naqPzRc#:A1{t/h9L @#^kUjMpmpms*o(e(U0e[,k?trkPAUGaGI
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: fd 8f 84 b0 de d7 3e 0c 01 f3 64 e2 60 e5 d2 5e 99 f0 97 fd 4e f9 68 46 e0 f9 22 af d9 cc 79 04 7a ca 4f f6 58 5b db 5e ea 1b 41 3d b1 a0 42 ad d7 fb 31 90 2d 7c 42 92 c8 bb e8 81 43 c5 2e 5f 31 e2 a0 6f 9b 01 e1 2c 38 82 23 20 06 99 06 d0 19 51 b7 18 52 59 a4 04 4a a2 de 4f 0c 75 ba dd b8 7d 65 4d a2 09 7d a8 5b 58 a5 01 33 2c 17 c9 47 00 0e 04 77 83 56 1c 5e 12 85 09 45 9a 84 52 86 e8 eb bd 6d 97 ff 00 ed 9e 98 85 14 d5 da 88 be 3b c0 d6 1c da d4 95 5d 8c 25 f6 4a fd ae 25 7c 74 f2 89 cd a3 3a 04 e3 67 f0 23 03 f8 94 30 8b ea 55 a5 80 bf 43 f8 2c 68 d9 be d2 11 10 6c b5 3f ee d8 cc 1d 4b da 1d 10 7c 52 27 49 2a 3c b4 d2 9d 57 c3 16 1d 54 f4 b6 34 d1 ed f0 bf d8 0a d7 cb e9 19 bd 3d 78 42 5a 6d f3 45 18 15 bf 95 44 d2 97 46 75 75 15 b2 b5 2d b6 3f c3 ae Data Ascii: >d`^NhF"yzOX[^A=B1-\|BC._1o,8# QRYJOu}eM}[X3,GwV^ERm;]%J%\|t:g#0UC,hl?K\|R'I*<WT4=xBZmEDFuu-?
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 0f 04 7c 23 48 c4 e3 22 5d c8 d1 d1 f3 12 b2 cb 31 f3 d1 02 85 f0 5a 51 c0 ea 6b 03 ce 9b 5f 08 05 54 0b ce 79 1d 4e 15 d3 0d 34 7c fb 22 a5 82 f9 3a 33 e6 34 56 16 72 63 0a b1 78 ad 7a 59 f7 21 0d 4a a8 8d 0b 37 c1 95 e0 0b 76 08 b6 da 57 a3 2a 2a 01 4d 90 7c f5 72 96 ea dd 45 82 f9 3a 8d e8 7c 71 70 7e 27 0a 3c 6d a5 90 6c d0 bb a3 d2 fb 12 51 39 d0 55 cb 4b e2 e3 52 4a b9 0c 5d 38 78 94 69 56 81 14 b8 17 34 d5 cc 21 ef b4 cf 7e 99 62 f6 f7 10 d1 15 1e d5 e6 3c 13 72 4f 00 a7 e9 b1 ab ba 9a 32 83 bf af 8b 96 80 5a e1 74 9d b5 7c 44 8a 05 5c 6b 88 d8 ee 00 15 5e ce d0 c8 08 3b 7d 93 75 e2 b2 f1 a5 71 1e 36 4d 42 52 7c 71 17 d0 82 a1 6d e8 9d 31 cd 7c 3d 0e 1b cd a5 99 3c 84 a3 97 14 39 1a d0 b2 e2 92 cb 7c 0b f8 22 92 80 05 b5 57 b1 34 21 2c 9d 23 95 c0 Data Ascii: \|#H"]1ZQk_TyN4\|":34VrcxzY!J7vW**M\|rE:\|qp~'<mlQ9UKRJ]8xiV4!~b<rO2Zt\|D\k^;}uq6MBR\|qm1\|=<9\|"W4!,#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49856	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:01 UTC	678	OUT	GET /movie/passengers HTTP/1.1 Host: gomo.to Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:01 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips X-Powered-By: PHP/7.4.33 Cache-Control: no-cache Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhLeHppSEF3cGF4RThySnBKeXZaSnc9PSIsInZhbHVlIjoiQkpzXC9iRlpKSkEwRjlteFBZOXN2TURUN3FreXgzME4wRTcrbkE4ZXNLMTRyUSttdEUyVENFY2h0bEVXMmlQTk51UTF3ZXQxbmdNblJjZFJQd0ZiOVd3PT0iLCJtYWMiOiJmNDQ2YjI0ZGMwODQ1MjZiMjQxODhhOTVkNjlmMzIyNzM1NGRiOGRkODI3NDBkYjQ3ZDBkZTFjNTUxMWExZTZjIn0%3D; expires=Tue, 17-Dec-2024 12:52:01 GMT; Max-Age=7200; path=/ Set-Cookie: watchXyz_session=eyJpdiI6IjU4MHowdElmOVZJd1wvbW1WQjZmOWVRPT0iLCJ2YWx1ZSI6InQ3VWYzckpDVitRWEpmNDBRNkNqNStSOHFnUzlMUVFwRDlCb3Z5VkhHQmU2TFlVMkRlUFlMYytQUWtoZ05EODQ2T2FjMzBQMmE3d0JmZUltdUdhSEZRPT0iLCJtYWMiOiIyNTMwYjU4ZjFiOWY2ZmY1YzczOWZhZWI4NDAwNDUyZGU0OThjZGI0YmY0ZjQ0NWNmYWZhMjUyZTUxNmY0NjhjIn0%3D; expires=Tue, 17-Dec-2024 12:52:01 GMT; Max-Age=7200; path=/; HttpOnly Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-17 10:52:01 UTC	7170	IN	Data Raw: 33 30 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6d 6f 2e 74 6f 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 6d 65 Data Ascii: 309f<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="shortcut icon" type="image/x-icon" href="https://gomo.to/public/images/favicon.png"> <me
2024-12-17 10:52:01 UTC	5283	IN	Data Raw: 6f 6d 5f 6c 6f 61 64 69 6e 67 5f 73 69 67 6e 27 29 2e 73 68 6f 77 28 29 3b 0a 09 20 76 61 72 20 74 63 20 3d 20 27 62 58 46 58 62 57 39 68 56 6e 4a 5a 56 30 4e 68 62 33 46 4f 5a 6e 42 78 51 6d 68 73 62 55 64 42 5a 44 4e 61 62 6d 68 48 56 6e 70 74 62 6a 6c 71 5a 6d 31 4c 52 32 35 61 62 58 42 73 56 30 74 77 5a 32 39 58 53 57 78 61 64 56 52 70 53 30 64 6e 62 47 46 34 61 47 45 78 5a 56 52 73 57 6b 64 6b 62 44 5a 6c 57 47 35 58 4f 57 74 79 63 47 31 74 63 47 46 4c 61 32 4a 48 51 6d 68 73 63 43 74 55 62 44 56 58 63 47 31 78 56 31 70 5a 53 6c 4e 6f 62 6d 31 48 56 31 6c 61 55 6d 35 77 52 33 56 56 57 6c 70 68 62 57 34 79 5a 57 39 77 59 54 4a 68 63 47 46 68 61 48 42 58 64 47 68 5a 53 6d 46 6e 62 31 70 57 5a 32 35 61 54 6d 64 73 4d 6b 4e 56 63 54 5a 35 63 57 31 77 54 Data Ascii: om_loading_sign').show(); var tc = 'bXFXbW9hVnJZV0Nhb3FOZnBxQmhsbUdBZDNabmhHVnptbjlqZm1LR25abXBsV0twZ29XSWxadVRpS0dnbGF4aGExZVRsWkdkbDZlWG5XOWtycG1tcGFLa2JHQmhscCtUbDVXcG1xV1pZSlNobm1HV1laUm5wR3VVWlphbW4yZW9wYTJhcGFhaHBXdGhZSmFnb1pWZ25aTmdsMkNVcTZ5cW1wT
2024-12-17 10:52:01 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-17 10:52:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49861	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:01 UTC	612	OUT	GET /movies/12320562862-poster-Bigfoot-vs-Krampus.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	920	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:01 GMT Content-Type: image/jpeg Content-Length: 21006 Connection: close Last-Modified: Mon, 16 Dec 2024 04:38:55 GMT ETag: "520e-6295bc21fd0d0" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3376 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aToFT3Dsaj%2FMmGANNdY8lao9%2FSIh%2Bry5FP%2B1xf2xHzV72TFwo7zcU4Zp86JvVr43Z06Tp3g%2FLZNxam8vDHIZXZFDZ16BpkjdgJj1G2eD7svlnsc44X7KPBmlulApBgI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c7e3c4e32c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1790&min_rtt=1776&rtt_var=694&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1190&delivery_rate=1546610&cwnd=137&unsent_bytes=0&cid=85fc9f165b5bad65&ts=453&x=0"
2024-12-17 10:52:01 UTC	449	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 76 5b 16 9d 56 c4 71 63 98 a6 Data Ascii: JFIF.$ $.5--5@99@QMQjj.$ $.5--5@99@QMQjjJ"7v[Vqc
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: a3 dc 40 ef a2 e5 7e 7f 06 c6 0f d7 2c fb 3a 63 ca d6 95 60 e6 14 e9 4c 0f c3 66 41 5a 11 91 df cb f2 97 e7 9a 97 09 7c 50 2c 75 06 0a 8a cf aa 5a a7 59 c6 8a 6d 79 22 27 c4 5d 4d 1d 4b df 17 3e a7 c1 4f d8 dc 97 d5 1f 2a d8 1a 46 cc da 62 86 04 0a 5d 3f cc 8d 9a 96 3d fa 71 75 c9 b1 63 53 aa 69 0e 2b f1 2b ad ab 31 c7 a1 f9 b8 0d b0 12 2b 96 53 6c b9 b4 96 79 6a 04 65 45 70 cd 2f 89 fc d1 3e 83 b3 fc f1 a3 30 ae b6 2c e8 54 9f 73 fc b7 97 1a 90 37 4d b8 ce 55 7b 50 ba a3 b5 da 25 d0 82 0b 26 2c d4 0b de 22 34 5e f9 26 7b 69 54 94 96 16 13 8b 44 4d 4c 70 80 07 b2 51 8e 53 73 a2 a5 fe 7f 62 ea 45 6f a0 91 57 82 84 07 79 d5 de 77 80 eb 22 8b ea 1b ad ad 55 19 a5 71 e4 86 3c 57 f2 c1 8e b3 15 a3 b7 af 73 b8 6b 33 0e 4d 7c ee de bf e7 60 fa 6e 73 da 78 ce 33 Data Ascii: @~,:c`LfAZ\|P,uZYmy"']MK>O*Fb]?=qucSi++1+SlyjeEp/>0,Ts7MU{P%&,"4^&{iTDMLpQSsbEoWyw"Uq<Wsk3M\|`nsx3
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 27 e4 52 fc 8a 4f 35 df f4 06 86 6b b5 7f 2c 4d ec d3 e2 e7 39 cd 5f 6d f9 bc 55 bb 9f dd b5 8f f5 8f 37 d2 bf e9 ba f6 60 ea 6f 7d 88 fb ea ee 71 43 a6 25 dd 76 92 f8 f9 73 82 63 8b 86 c4 9f ff c4 00 2e 10 00 02 02 02 02 01 03 02 05 04 03 01 00 00 00 00 02 03 01 04 00 11 05 12 13 14 21 22 06 31 10 15 23 32 41 24 33 34 42 16 20 51 52 ff da 00 08 01 01 00 01 08 01 88 ce bf 81 0e 6b 35 9d 67 04 77 81 11 85 f8 44 4c e4 27 3a 64 06 78 f5 9a de 48 e1 7b 61 67 be 7b e7 be 7b e4 44 e7 be 0c 64 60 8f be 18 eb 3a ce f2 7e d9 01 33 81 59 e5 3f 10 e1 f9 26 7d a6 89 2f f7 4a e2 30 fe f9 ac 11 c5 c7 b6 75 d6 08 7c b1 a3 b8 f6 18 9d 61 14 61 e4 e6 b3 ae 40 fb e0 d6 de 4d 78 1c f0 84 e3 3c 23 ec 1b 8d ce bc 1d 70 53 3b 8d b9 18 51 ac aa df 0b c1 99 67 eb 0e 51 ab ea 9b Data Ascii: 'RO5k,M9_mU7`o}qC%vsc.!"1#2A$34B QRk5gwDL':dxH{ag{{Dd`:~3Y?&}/J0u\|aa@Mx<#pS;QgQ
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 42 ca 70 42 57 1b 3a 07 fa 3b c9 84 1c e2 e5 21 f1 8e 7a e0 2c 23 7c b2 bb 24 f0 e9 75 20 11 77 10 e4 e9 a4 3c 4d 5f 40 e0 5d f5 02 dd 32 08 0e fd a7 21 44 91 13 95 d8 38 82 e9 5a c7 a9 a4 5d b8 c3 10 12 eb 2f 5c 17 88 8d 3b 5a 3a a2 b7 49 e9 8c 2f 18 97 52 b7 fb 64 06 74 3e ef 6f eb 30 45 ab 82 8f 73 a8 3b c0 80 64 6c 60 31 61 95 7d a2 30 67 db 0f bd 53 87 28 5a 38 6e 18 9c fa 8d bb 1a fa b2 b3 bb 0d eb c7 d7 79 b9 3b ae 2e 0e 3b cf 61 6f 95 c9 1a b9 45 a1 e8 f2 a4 6c 82 bd e1 b7 6d 59 3d b2 83 a4 5e a2 ce 1a c8 c1 9a a7 8e 78 c5 c8 4c 82 92 db 2b 33 81 9e f1 8a 4f eb 81 e3 e2 3c e1 30 4e 84 b7 a4 ba d2 14 20 c9 b2 89 ed 13 1f bc 20 f2 63 78 6a 1f e0 6d b4 75 06 bb 88 2c aa 7d e6 3a 57 8d c0 77 b3 60 6c dc f0 ab bf b1 46 1d ea 75 8d 62 76 a7 ce c0 71 dc Data Ascii: BpBW:;!z,#\|$u w<M_@]2!D8Z]/\;Z:I/Rdt>o0Es;dl`1a}0gS(Z8ny;.;aoElmY=^xL+3O<0N cxjmu,}:Ww`lFubvq
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 31 69 18 de 44 e2 e6 71 26 63 05 a4 85 b2 d0 41 9c 20 be 25 62 0f df 01 ed 1d 4c 1f 24 d3 10 89 55 8b 13 ae b0 f3 38 5c 3e 95 18 46 a4 d8 32 15 67 a8 3d d4 9a 1b 1e 67 90 03 b2 31 c7 5d 7b d2 4f 20 e5 d3 42 87 68 57 10 d3 52 d9 1c 5f d5 55 ac fc 2c 8c 44 c4 4c 30 80 3e f6 39 08 fb 65 cb 3e 6e d0 37 e7 b0 ea 2e 4c cb 30 a0 e2 77 2d 13 22 de 6a 63 3d e7 00 27 06 31 44 51 31 10 14 e1 7c 43 d9 3a c8 95 f6 98 c5 80 cc 60 55 39 9c 81 b0 a3 c2 62 89 25 13 c7 f9 39 14 56 aa ca e6 4a b3 e8 8b d1 db 0b d6 3b 3e fc d5 bf 09 73 b9 9f 5f 40 13 3c 5d 7b c1 69 30 fa 9c 45 7b 0a f2 72 20 f9 1e d9 f4 b7 d5 a3 4c fd 1d ce 42 ca fa c9 0b 2d 19 7b 63 1d 01 ed 96 ac 14 ee 31 d2 0b 5e ca db 84 e3 b6 7b 4c 7b 4a a7 05 73 13 9d 33 53 19 c7 d2 93 8f 95 96 97 4b 2b c6 08 f8 96 41 Data Ascii: 1iDq&cA %bL$U8\>F2g=g1]{O BhWR_U,DL0>9e>n7.L0w-"jc='1DQ1\|C:`U9b%9VJ;>s_@<]{i0E{r LB-{c1^{L{Js3SK+A
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: c8 db 7a 1e 1d 38 9d 95 b2 29 ba 44 2b 5e ae 46 d2 73 9c 5a c0 ec cc 15 d8 f1 8a 7a 5e 09 f1 1e 22 cb 53 db a4 41 0a 97 97 2f bd db 59 44 cc 4e e2 64 8c b7 9c 7d 43 59 4b dd c9 58 f5 07 d8 72 35 f8 6e 72 22 4a 75 1c 47 b3 d9 bf 2c 2b c6 27 c9 a6 5b 58 b5 c3 44 f9 9b 19 cb 47 5a 8a 8c e2 23 fa 5d e3 6b d7 75 b6 43 39 2a 35 d2 88 20 e1 a6 7c 2d cb af 44 0f 53 e1 bf c8 3c b7 13 09 44 4b 06 46 b3 a2 78 81 89 b2 59 7e 7d 91 8f d4 a5 d9 fc e0 8c 12 42 31 9f dc 2c 8d 6f 17 6e 10 3a 55 8b 0f 66 bb ef e1 af c2 33 b8 cc 44 67 71 19 c8 fd db ce 23 af 95 b9 61 24 d2 4e ad ea 2b 3e 73 86 fe fb 33 9a fe c2 f3 88 3f e9 b5 1e 03 f5 d2 dc e6 7f c5 8c e2 27 48 2c e5 4c a2 61 51 c5 18 8d 98 89 b0 06 d8 54 45 a2 10 aa d9 9e 20 e2 2d ea 6d 20 9b e3 ea f6 0c 26 c1 4f f3 88 29 Data Ascii: z8)D+^FsZz^"SA/YDNd}CYKXr5nr"JuG,+'[XDGZ#]kuC9*5 \|-DS<DKFxY~}B1,on:Uf3Dgq#a$N+>s3?'H,LaQTE -m &O)
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 75 5e 71 32 78 a7 10 0a 25 64 9f 0c 77 f9 92 26 23 50 80 73 66 1c 39 15 4c 07 58 1f f6 a7 58 e8 2c 9d 9f 88 69 28 78 ad 29 c4 f2 94 0d 94 a7 12 56 51 f0 85 60 9e 08 e4 ac 8a c9 a0 9f fd 47 dd 53 6c 87 8d ec a1 bc 57 8b 70 5f 3b dd 31 af 31 76 83 18 4e 52 bb 5b 5e fa 11 88 81 60 73 9e 8a ed 7d c2 39 14 eb 29 ca 6d c4 26 f9 32 e2 13 a6 4e 2f f9 2c e3 10 4d 99 cf 90 4d b6 1b 72 58 71 68 86 26 f9 b8 ab a3 10 01 cf 61 44 73 1f 0c 86 62 87 0d 2f b0 ab f7 80 01 c2 ce 4f 34 9f 4e 96 28 8f 37 00 79 26 bb 16 33 83 84 b7 78 92 aa 32 af 78 c7 b9 98 4d c3 79 ae d0 f0 fc 3b ec c9 ae 1c 10 0d a6 cb b4 0b 9c 27 8f 35 44 b8 c6 bc 93 e0 68 06 41 68 e0 a6 58 e3 f2 94 20 cb be 47 78 26 c9 07 74 f0 42 cb 1e 47 a2 f0 8f ba 18 9a 44 a0 5d 2e 0d 00 67 75 75 62 7c a5 05 9a 18 a3 Data Ascii: u^q2x%dw&#Psf9LXX,i(x)VQ`GSlWp_;11vNR[^`s}9)m&2N/,MMrXqh&aDsb/O4N(7y&3x2xMy;'5DhAhX Gx&tBGD].guub\|
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 8e 88 c6 52 af 85 de d7 40 13 07 3b fc 95 20 64 74 4d 02 db ba fb aa 6d 6f 7d a8 cd df 25 85 e4 d8 6e d9 3c 02 18 0d c6 ec 72 3c 91 35 43 9e 4c 36 60 19 e2 9b 89 9e 66 0d 53 4b 4e ad 22 e3 e1 37 4f c4 4a 2e 03 1d c8 10 73 84 2f 24 09 33 00 23 cc 7b aa 50 f6 ce 37 ea e2 4f d8 7c 06 31 b4 a7 c8 02 79 36 7e c8 63 8c 8e 9d 61 14 fd 13 1b 66 c1 3a 9b cd d3 a2 f6 80 02 70 31 6c 70 00 8e 6b b4 33 7a 03 1c c9 74 9c f9 5a 17 6a a9 54 b8 e8 25 bc 30 b5 36 a1 63 c8 dc 8e 3c 39 a6 17 8a a1 c5 8d ab 60 3a 7f 24 f6 76 5e c4 c3 0c 16 33 6b 81 ce 55 66 54 75 41 88 18 86 36 2d ba 39 2e d7 d9 c9 a8 31 b8 bd cf 24 97 5f e4 80 a2 ff 00 57 94 ff 00 25 04 1d 76 43 42 39 23 00 c1 e7 6c d1 c4 08 5a 5b 60 f8 04 ca 88 ee c9 04 79 9c 4c 7c 86 9b 33 59 a1 28 11 d7 24 5a c3 dd be 78 Data Ascii: R@; dtMmo}%n<r<5CL6`fSKN"7OJ.s/$3#{P7O\|1y6~caf:p1lpk3ztZjT%06c<9`:$v^3kUfTuA6-9.1$_W%vCB9#lZ[`yL\|3Y($Zx
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: b5 b6 6d 93 18 d1 e9 67 84 0e 4a 99 7d 3c 60 11 c4 6a 86 32 5c 70 83 f6 47 7a 93 71 f4 6e 56 5a ba f1 6f 96 c3 7d af c2 70 de d3 aa ed 4d 21 a6 5b bb 17 5d a9 ad 63 a6 5d 82 7e 8a bb 70 30 6e 9c 23 20 ab 09 a9 52 4e ee 67 8a 7b 64 81 88 e1 19 05 da 24 d3 3b 90 c0 2e aa 36 1e 0f 94 5d 56 60 6b 00 6c 61 19 2e d2 30 99 b6 01 22 53 c4 03 61 84 6a bb 50 6b aa ba 5f b8 0e bf d5 55 15 03 66 08 6c 66 b3 2b b5 48 d1 a5 b8 a1 55 1d de b8 44 7c d5 62 c2 dd 7a aa ed 73 8e eb 08 66 b3 99 5d ad ce 33 16 b2 31 8a c6 15 da c6 c0 8e 25 39 d2 df 64 e2 33 13 c4 22 a3 3d 83 3d 80 44 63 e6 48 56 c5 52 e3 66 58 56 58 d7 a9 38 06 f7 63 35 53 15 f8 af 52 e1 c1 67 05 6b 54 23 6c 25 7a 4a 24 4d 40 16 50 57 9b 35 7b 02 88 c2 1d c3 66 6b 70 0c b4 43 71 b6 9e 67 e0 2b 35 a3 50 b9 76 Data Ascii: mgJ}<`j2\pGzqnVZo}pM![]c]~p0n# RNg{d$;.6]V`kla.0"SajPk_Uflf+HUD\|bzsf]31%9d3"==DcHVRfXVX8c5SRgkT#l%zJ$M@PW5{fkpCqg+5Pv
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 68 2c ef 8a ad 8c 58 ce 0a e5 2b d0 ca 93 b2 20 a7 80 b1 f6 a5 45 34 b7 84 01 b5 0b 77 6a ea f9 12 be 88 5a 2f 6e dd 44 c1 16 9a 50 65 f7 17 d1 16 04 e9 15 33 92 2c bd 18 ad a9 e9 46 c6 28 51 b1 af 2c e5 b4 f1 14 95 be f0 7c b2 dd a3 cc 72 a2 0e 38 0d 21 00 38 00 1f ec 6a 2a 42 ae 62 8d 09 2b 7a 82 56 bc 64 71 a7 2c bf d3 c4 c2 22 2f e1 4a 6d 15 9d 30 3b 0e 28 f4 62 81 38 d1 ca b0 d0 7b 9d f4 c8 39 45 7c 87 b6 6d eb 40 55 fc 6d 69 33 e0 89 f4 52 0e a9 80 14 a8 ea cb 95 22 93 30 ee 5f a0 22 17 7e cf 11 3b 86 51 5c be 25 f4 45 07 ef 35 11 6d 03 69 c2 c8 15 2f a6 56 68 5f d4 b4 5c 25 c0 5f 30 59 0c 30 74 14 a7 95 71 28 39 b4 b5 a5 95 ee e1 d6 6a 6b 80 b4 17 36 78 85 e1 32 6c f8 3c 71 2f 81 69 a3 b0 60 40 3d 4b 1d 80 f0 cb 9e 63 34 c0 4d 2d c2 36 6c 60 1f c8 Data Ascii: h,X+ E4wjZ/nDPe3,F(Q,\|r8!8j*Bb+zVdq,"/Jm0;(b8{9E\|m@Umi3R"0_"~;Q\%E5mi/Vh_\%_0Y0tq(9jk6x2l<q/i`@=Kc4M-6l`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49863	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:01 UTC	603	OUT	GET /movies/1231355644-poster-Passengers.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:02 UTC	913	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:02 GMT Content-Type: image/jpeg Content-Length: 9292 Connection: close Last-Modified: Sat, 28 Jan 2023 17:23:56 GMT ETag: "244c-5f3563f2bae07" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zVkwJsq4%2BKL0nLXZa1n%2BnqXNwQ6u0Thp06dlyufoKeBgmOCvj4YJDjD1zp%2FNilEAnAxW%2FNYAf9hNRhoTh%2BHDp9hpCopwq5r9B7yd4KbDiOqnDz%2BK6Y%2Fz7GQRdl1umfk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c7e3df74201-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1570&min_rtt=1557&rtt_var=610&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1181&delivery_rate=1757977&cwnd=225&unsent_bytes=0&cid=c95da5b017f65b62&ts=923&x=0"
2024-12-17 10:52:02 UTC	456	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 0a 08 0a 08 0b 0b 09 0b 0a 0b 0b 0b 0e 10 0c 0a 0b 0d 13 17 15 10 14 0f 16 12 12 0e 16 12 0f 14 0f 0f 14 12 14 18 13 16 14 19 20 1a 1e 19 18 2b 21 1c 24 13 1c 1d 32 22 33 2a 37 25 22 30 01 06 0b 0a 0b 0d 0e 0b 0c 0c 0e 0e 0c 0d 10 0e 1d 14 0d 0c 22 14 15 17 0e 1e 08 17 0c 10 16 10 11 17 0b 10 13 14 0b 11 19 11 1e 09 19 0c 08 22 18 1d 14 0f 1d 10 0d 0c 0f 16 10 0b 14 15 23 16 18 ff c0 00 11 08 01 0c 00 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 96 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 07 01 08 10 00 02 01 03 03 02 04 03 07 03 03 04 03 01 00 00 01 02 03 00 04 11 05 12 21 31 41 13 22 51 71 06 32 61 14 23 42 52 81 91 a1 15 d1 d2 62 b1 c1 33 53 82 93 Data Ascii: JFIF +!$2"3*7%"0""#"!1A"Qq2a#BRb3S
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 5b 92 0f 5f a6 68 64 f2 c7 b8 e5 c1 65 f2 e4 76 3d 30 3b 66 80 62 56 56 bd b8 30 5a c8 e4 8d ec 40 1e e6 aa fc 34 8b 3e ad 24 cc cb 80 3b d0 cd 43 c5 b8 b8 8c 13 84 57 0b 1a 8f 53 96 cb 7b 01 9a ad 05 b5 da dc 3f 80 ca 37 b6 7a e0 e0 00 31 53 b0 f5 69 f0 76 c7 00 0e 0d 50 79 3b 57 39 53 f1 04 0c 4c 33 3e dc 7c a4 e6 8c 58 ea 57 2e e2 3b c5 60 c4 64 1a 06 c6 c5 1a 19 9b 9a aa 4f 5c d3 99 89 35 03 30 19 a5 59 a4 61 e4 9a a9 2a aa f2 70 05 32 ee e8 41 13 30 eb e9 df 35 86 bc ba bd bc 73 92 ea a7 e5 1d a9 89 58 99 4a 8d 15 c3 db 80 d9 75 3e 94 1a 72 8c 37 02 31 54 a1 d2 ef 24 01 99 c2 8a b0 da 6c b0 8f 2b a9 fa 1a 6e 3c 99 ed be c5 19 7e 9d 2a a3 54 d2 99 23 62 08 18 fa 1c d4 39 dc 01 ab 17 64 10 b8 4b 86 43 d0 8c 8a d1 41 26 00 3d 78 c5 66 67 f2 dc 46 c3 d8 Data Ascii: [_hdev=0;fbVV0Z@4>$;CWS{?7z1SivPy;W9SL3>\|XW.;`dO\50Yap2A05sXJu>r71T$l+n<~T#b9dKCA&=xfgF
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: d4 15 1d 54 0e a5 7a 66 8a 43 09 57 60 3f 0a e1 45 49 25 b4 51 df c7 20 0d 86 5e 48 1f 87 ad 58 8a 65 92 46 48 80 1e a0 72 c4 7d 4d 73 e8 df 64 d1 c6 a8 aa ee 39 41 e4 cf a9 ea 6a 95 d3 16 24 9f d0 77 a2 72 98 92 3d cc c0 00 39 f4 1e e4 d6 47 50 be 0f 98 ed fb f1 b8 75 3e de 95 52 2a 0a dd 81 35 3b 86 77 f0 62 c9 62 71 81 d4 9a 52 81 6f 3c 76 80 e5 a1 55 37 18 ff 00 bc 40 ca ff 00 e1 d3 dc b5 2b 5d 96 8f 3d fd ce 19 2d 86 20 1f 9e 73 fe ea 9f ce 28 15 9c cd 25 db bb 92 5a 56 32 12 7d 49 cd 05 60 dd 1e 4e 83 61 86 15 a0 8d 4e 3a 50 1d 2f 1c 0a d4 0c 01 4b 43 e5 12 35 5f 36 6a e2 ed 09 9a 1d 2c bb 4e 05 5a b4 f3 c5 97 3f ad 50 12 58 25 70 19 72 3a d6 3b 5a 07 c1 93 e8 0d 6c 12 ef 4d 17 1e 02 4f 04 93 81 96 83 78 df 8f 5d b9 cd 65 35 b9 a2 58 e5 03 92 72 02 Data Ascii: TzfCW`?EI%Q ^HXeFHr}Msd9Aj$wr=9GPu>R*5;wbbqRo<vU7@+]=- s(%ZV2}I`NaN:P/KC5_6j,NZ?PX%pr:;ZlMOx]e5Xr
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: db a0 6e fd 3d 28 50 4e fd c7 5a 33 68 b9 03 b8 a4 96 c2 48 9b 18 15 e8 68 e5 b7 98 06 5f 98 75 14 29 1f 60 c3 0d cb fc d1 08 03 2b 07 88 e5 7b 8a ba 14 c3 c8 41 19 fa 73 4a a0 59 32 32 3f 51 4a 9e 20 0a 97 da fd d5 d6 cb 7d 22 f5 3f 3d cd d4 4f 8f 64 4d 81 68 8c 96 17 ab 0b dc 4b 0d d4 b3 70 33 b1 8b 13 f4 00 76 ae ad bd a9 ad 21 51 b8 e4 e3 b2 82 4f ec 01 35 ab 6d 79 17 b8 70 cb a4 d5 9a 26 2b a7 df f3 d3 ee 5c 93 ef 84 aa 7a 65 96 a3 7f f7 17 56 3a 8d ac 99 6f 02 76 81 c0 57 1c 8e 4a 57 7c 4b 99 fc 45 5f 08 aa ba 06 2e 73 c1 e7 cb f2 e3 f7 3d e9 7d ae ea 44 60 60 2a ea 10 84 cf 0d b9 b6 9c 36 3f 08 e4 f1 43 b4 bc 85 ba fc 18 dd 0d af c5 a0 5b eb 59 22 bd b2 3b 1c ec 3b 24 5f cc 87 1c 86 15 cf 7e 27 d2 af d7 53 9d ad 2c 6e e5 8a 53 e2 c6 62 89 ce 37 76 Data Ascii: n=(PNZ3hHh_u)`+{AsJY22?QJ }"?=OdMhKp3v!QO5myp&+\zeV:ovWJW\|KE_.s=}D``*6?C[Y";;$_~'S,nSb7v
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 09 27 f3 78 b6 eb 18 f7 26 ad 6a b6 70 5e ea ba 64 17 50 09 ad 64 b5 d4 23 ba f4 1b 85 b6 dc 91 f2 b7 19 5e e0 ad 55 97 59 08 fd a1 7f a9 be 9e 55 84 a9 6c 97 a5 ff 00 0e c6 91 e1 0b eb 9c a5 53 b9 d4 9a 3b df b0 d8 59 cd a8 de 22 09 ae 23 8d 95 23 86 36 c8 43 34 92 10 a0 be 0e d5 19 62 14 9a a3 a3 c1 ab da fc 47 72 ba 9e e9 e1 87 4f 8a 0b 1d 48 f5 9e 31 34 8e 3c 5e de 2a 07 01 ff 00 37 cf 4e 33 7f 45 d5 b5 47 bb 4b 91 63 ab b2 5c 5b ea 30 46 d2 f8 52 88 96 dd a1 99 62 47 74 c0 40 d1 b1 5d a7 73 0a 96 4a 41 8b 59 e5 b9 89 9a 7b 4b 9b 09 63 73 14 90 4f 83 92 00 6d f1 3c 6c c9 22 10 7a af a1 15 5a 4b bd 55 26 74 4d 1e 79 a2 07 6a 5c 89 e2 55 2b f9 c2 b3 07 aa 7a 04 f7 b3 4d 7e d2 cf 7d 7b 62 a6 11 a6 dc df 46 22 77 3b 58 cd 84 11 42 e5 01 db 82 c9 50 cf 71 Data Ascii: 'x&jp^dPd#^UYUlS;Y"##6C4bGrOH14<^*7N3EGKc\[0FRbGt@]sJAY{KcsOm<l"zZKU&tMyj\U+zM~}{bF"w;XBPq
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: c5 fc ad d0 d0 d8 3c 5d ac e8 0b 80 00 61 b1 78 1d 5b 82 7d 32 2b d6 28 fb de 12 c9 12 9c 88 d9 46 41 c0 63 b7 fe 2a 59 02 26 e6 d8 12 0b 8c a9 20 fb 8e b5 e8 b8 b6 24 8d e0 60 65 b3 c6 06 40 ef 43 41 27 ef c6 7c 3d c0 6c d8 37 64 e5 89 eb dc 2d 30 ba 88 42 79 83 bb 63 79 41 d3 f2 9e 7d 48 fd aa 59 02 e2 68 0e 71 22 1c 72 79 ed 4c 6b 8b 64 c6 e9 17 9f 4e 68 63 2b 24 c6 2d dc 83 b1 b0 83 6e 7f b5 7a ac 09 97 6f 3e 1e 4a ee 41 d3 81 81 52 c8 12 37 36 c0 80 5c 02 d8 db f5 ce 08 ff 00 7a 9e 86 2d cd ba 96 13 c4 5d 83 01 16 d4 03 6a f6 1d 68 9d 59 62 a5 4a 95 59 05 4c 96 35 9a 19 22 7c 85 91 4a 92 38 23 ea a4 74 22 ac d2 a8 50 36 2b 7b 48 0a 32 de 6c f0 80 5d 8d 20 cf 03 1e 6c b6 79 a7 cf fd 3e e7 60 6d 46 18 8a e7 02 39 54 13 9c 75 f3 76 c7 14 0f 59 b5 d3 5e Data Ascii: <]ax[}2+(FAc*Y& $`e@CA'\|=l7d-0BycyA}HYhq"ryLkdNhc+$-nzo>JAR76\z-]jhYbJYL5"\|J8#t"P6+{H2l] ly>`mF9TuvY^
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 00 35 a7 d3 09 2d 27 d0 0a 38 f2 54 95 41 86 c1 a5 4d 14 ab 41 8c 65 7a 29 b4 87 5a 21 46 3a e0 ec ba 97 b7 9c e6 8b 7c 3d b4 5b de 7a 99 46 0f d3 14 17 54 cc 5a 8c 8a 7a 49 e6 5f da ae fc 33 38 66 bc 8b f1 2e c6 23 f7 15 8e 18 95 1d 6d 45 70 52 f4 8a 97 83 ef a4 0d d7 26 b3 f2 5a 26 ec 91 e6 27 71 26 b4 fa aa f8 77 59 ec d4 3a 44 ca d6 49 61 b1 f0 ca 40 93 68 ac b9 70 0e 68 85 a4 09 1f 44 00 b6 33 53 47 95 f6 ab 21 b8 ed ef 51 31 f9 2b 4b 17 65 e4 1e e7 f7 aa 17 6f e1 c5 8c 29 62 08 5e 28 b3 fc bc 75 f5 a0 93 79 98 b1 3f 41 4b 94 82 48 6e 93 1f df 0a d8 49 93 16 3e 95 94 d3 c8 5b af 41 5a 69 d8 f8 2c 7a 71 57 1e e0 c9 66 26 55 d3 75 c3 30 19 21 a8 92 0d ea 3b 1e f8 a1 f1 38 f1 5f de 8a c7 c9 18 a1 4c 36 8f 44 4e c0 29 c3 80 73 86 a7 3d b1 62 49 8d 72 4e Data Ascii: 5-'8TAMAez)Z!F:\|=[zFTZzI_38f.#mEpR&Z&'q&wY:DIa@hphD3SG!Q1+Keo)b^(uy?AKHnI>[AZi,zqWf&Uu0!;8_L6DN)s=bIrN
2024-12-17 10:52:02 UTC	622	IN	Data Raw: 4a 9d 1b b6 e6 f4 f5 15 9d b5 bd b7 9e 52 51 5d c3 12 14 ed 20 7e e4 51 38 b3 08 65 d8 40 72 0e d1 df d4 d2 da 13 6c 2a ee 01 c9 3f 40 2a ac 99 98 32 12 79 f4 eb c0 cf f3 55 ee 64 64 c6 31 93 50 c3 2a 78 e5 99 d8 6d f6 fa 72 68 a2 85 c9 9b 6f 87 c1 58 b6 c5 85 23 2c e3 1c f6 3c 13 46 57 5e b6 8d b6 dd a3 c2 73 8d c4 71 41 b4 6b 90 7c 4d c0 97 f0 99 8b 7d 33 c7 b6 45 55 49 e2 b9 5c 48 03 64 91 cd 74 d3 a4 8e 5c a3 d4 d9 d1 20 96 29 e3 59 21 65 74 61 90 45 58 15 85 d3 e5 96 c5 b1 11 26 16 3c a7 a5 6b ed ee 56 55 07 d6 99 76 21 a6 8b d4 ab ca 55 08 38 d3 69 c6 9b 50 87 95 9b f8 8b 5f b4 d1 2d 1a 46 1e 34 e7 88 e1 1e bf 5a 2d 79 34 91 46 c5 31 9c 1a e0 ba b5 d5 c5 e6 b2 eb 70 db 86 fc 51 70 ac 0e 5a 45 eb 6f ea 7a fd e7 f5 0d 6d cf 84 a7 36 f6 a3 e4 51 47 6e Data Ascii: JRQ] ~Q8e@rl?@2yUdd1P*xmrhoX#,<FW^sqAk\|M}3EUI\Hdt\ )Y!etaEX&<kVUv!U8iP_-F4Z-y4F1pQpZEozm6QGn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49865	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:01 UTC	357	OUT	GET /images/YouMayAlsoLike.png HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:01 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:52:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:52:01 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 41 34 70 33 68 33 4b 4d 62 62 56 50 67 56 35 43 33 55 4d 71 64 61 52 39 46 6a 42 75 67 6c 30 36 35 77 64 66 30 38 47 43 68 44 49 4a 74 6b 43 32 54 61 51 74 36 33 41 59 30 69 75 68 6e 43 6a 65 73 30 70 31 71 30 49 77 37 55 69 41 36 6d 4a 6d 42 39 31 69 30 58 35 66 44 34 73 4b 67 71 73 42 4c 45 65 38 6c 75 44 63 70 78 49 3d 24 6c 77 5a 2b 4b 48 55 5a 54 39 7a 5a 49 56 54 30 6f 6c 4b 2b 6d 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: A4p3h3KMbbVPgV5C3UMqdaR9FjBugl065wdf08GChDIJtkC2TaQt63AY0iuhnCjes0p1q0Iw7UiA6mJmB91i0X5fD4sKgqsBLEe8luDcpxI=$lwZ+KHUZT9zZIVT0olK+mQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 32 32 33 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 223e<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 6f 4b 2e 4a 45 32 51 34 78 62 69 71 63 53 56 55 34 55 6e 32 63 76 79 35 57 79 4f 30 4c 44 6f 33 6b 45 48 6f 48 32 5a 4b 56 30 73 6f 70 2e 43 6c 69 43 70 34 68 2e 79 55 63 55 34 65 68 76 42 59 59 5a 76 4f 69 30 66 57 36 4c 76 67 72 77 54 70 71 57 44 68 61 52 58 34 35 4a 69 4c 50 46 67 59 4d 58 73 53 43 50 6e 6f 68 4c 59 62 45 6f 6e 53 4b 72 53 72 70 68 5a 4e 77 62 37 42 36 72 62 76 45 4a 34 34 57 62 74 66 72 4e 52 6e 6a 58 45 6e 63 31 74 6e 70 42 53 38 58 73 64 64 4f 66 45 64 5a 67 34 74 55 64 65 46 52 56 61 64 4d 67 41 45 39 30 4d 64 39 35 73 70 57 44 47 30 79 65 65 44 57 38 48 5f 31 39 79 6e 2e 79 55 75 4c 77 73 4d 2e 46 6e 52 35 76 72 68 68 75 69 33 4f 43 39 55 33 50 4b 39 41 77 69 73 35 6d 42 63 64 37 57 67 7a 78 68 52 31 42 35 48 50 74 36 75 69 54 65 Data Ascii: oK.JE2Q4xbiqcSVU4Un2cvy5WyO0LDo3kEHoH2ZKV0sop.CliCp4h.yUcU4ehvBYYZvOi0fW6LvgrwTpqWDhaRX45JiLPFgYMXsSCPnohLYbEonSKrSrphZNwb7B6rbvEJ44WbtfrNRnjXEnc1tnpBS8XsddOfEdZg4tUdeFRVadMgAE90Md95spWDG0yeeDW8H_19yn.yUuLwsM.FnR5vrhhui3OC9U3PK9Awis5mBcd7WgzxhR1B5HPt6uiTe
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 48 4d 49 6b 4f 6c 78 64 4a 63 69 39 7a 4d 58 50 46 30 46 65 69 68 4a 6f 78 53 32 36 77 6a 31 41 75 57 32 45 2e 70 6f 71 52 78 78 62 6a 30 76 4f 74 58 42 69 63 70 6c 46 46 6b 73 75 7a 6f 56 76 72 48 36 5f 45 67 6b 7a 4a 71 47 61 78 47 6e 57 64 45 4b 63 67 6b 68 33 6c 31 71 34 6a 50 6c 2e 31 47 50 42 4d 6e 67 5a 73 53 54 32 42 7a 5a 37 48 34 31 45 6f 70 4e 78 47 6d 4b 47 59 7a 57 79 32 42 37 68 42 4a 57 61 69 49 36 77 56 6a 54 38 68 68 4f 55 74 34 6b 41 4c 67 47 6b 5f 34 44 39 39 79 57 72 4a 50 56 78 35 41 45 33 6c 55 6d 73 62 61 47 6e 43 72 68 45 52 66 64 68 54 42 63 44 49 4d 6d 44 5f 4e 4c 44 7a 67 68 44 56 68 63 66 61 7a 41 59 43 64 4c 4f 43 51 49 66 71 36 78 45 58 6c 64 67 77 47 64 65 45 32 71 32 61 6b 47 37 55 70 67 47 68 4b 45 33 31 65 4a 38 37 42 71 Data Ascii: HMIkOlxdJci9zMXPF0FeihJoxS26wj1AuW2E.poqRxxbj0vOtXBicplFFksuzoVvrH6_EgkzJqGaxGnWdEKcgkh3l1q4jPl.1GPBMngZsST2BzZ7H41EopNxGmKGYzWy2B7hBJWaiI6wVjT8hhOUt4kALgGk_4D99yWrJPVx5AE3lUmsbaGnCrhERfdhTBcDIMmD_NLDzghDVhcfazAYCdLOCQIfq6xEXldgwGdeE2q2akG7UpgGhKE31eJ87Bq
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 61 41 6b 4e 67 57 49 4f 59 6d 32 6d 36 71 50 47 71 77 72 61 53 66 56 73 57 79 72 73 6e 62 73 61 30 4c 34 64 32 38 58 77 69 5a 53 31 2e 31 78 45 48 45 50 7a 67 6b 38 50 69 6b 6a 5a 71 52 7a 79 67 54 57 31 4b 73 68 4d 58 58 4f 47 56 4c 52 6c 6f 48 51 42 79 41 78 64 36 6e 55 68 79 46 73 72 38 32 6d 2e 73 6f 6d 5f 56 39 74 5f 32 57 53 48 53 49 68 4a 32 48 30 58 49 76 39 5f 64 44 73 65 4f 67 75 5a 42 70 51 5f 36 4d 31 7a 77 69 72 75 49 54 68 75 67 53 61 51 2e 67 62 33 69 32 68 74 4e 32 6f 48 6c 67 62 77 4d 67 6e 63 4e 31 2e 38 56 44 69 30 72 6a 6c 72 56 6d 52 34 31 74 4a 33 75 6d 6e 50 35 79 66 4b 67 31 6f 78 30 4d 64 4a 45 70 6f 4c 4b 57 56 5a 76 57 70 34 49 65 52 57 56 56 35 70 32 78 7a 6d 56 39 69 64 54 6d 6f 37 35 34 43 42 35 76 78 5a 37 42 73 37 4c 57 54 Data Ascii: aAkNgWIOYm2m6qPGqwraSfVsWyrsnbsa0L4d28XwiZS1.1xEHEPzgk8PikjZqRzygTW1KshMXXOGVLRloHQByAxd6nUhyFsr82m.som_V9t_2WSHSIhJ2H0XIv9_dDseOguZBpQ_6M1zwiruIThugSaQ.gb3i2htN2oHlgbwMgncN1.8VDi0rjlrVmR41tJ3umnP5yfKg1ox0MdJEpoLKWVZvWp4IeRWVV5p2xzmV9idTmo754CB5vxZ7Bs7LWT
2024-12-17 10:52:01 UTC	1369	IN	Data Raw: 59 74 34 50 71 4b 35 4b 33 64 57 47 38 32 44 61 42 55 6d 57 53 43 6f 78 78 68 55 4e 43 6d 69 6b 6a 56 51 6e 6d 53 69 6b 68 6e 4a 68 43 44 77 66 61 41 4c 41 53 49 45 30 67 49 79 38 33 6a 6b 68 6a 56 32 6a 79 61 45 56 73 37 58 57 41 42 63 38 74 43 68 65 6f 6f 42 76 48 67 52 71 73 77 4a 45 54 31 73 51 36 65 49 31 58 72 33 32 4e 74 52 4d 32 59 6e 36 2e 48 52 69 4a 78 35 54 46 70 59 6c 4b 5f 41 6b 51 6b 56 66 36 42 64 33 7a 6c 44 6a 61 48 4f 76 45 71 6a 73 73 4f 67 5a 61 58 69 6d 36 5a 73 65 65 69 47 48 75 73 46 31 65 42 39 61 6a 6a 79 61 47 6e 6f 71 71 43 37 64 47 42 55 61 4a 58 38 42 2e 45 76 6f 7a 46 75 4a 4c 7a 4b 37 43 61 4f 49 42 4e 79 74 37 53 4d 70 5a 50 6b 75 6d 6e 65 6c 62 54 67 5a 43 31 77 46 4c 73 2e 57 78 43 63 4c 43 31 65 41 56 4f 4c 54 6b 4e 39 Data Ascii: Yt4PqK5K3dWG82DaBUmWSCoxxhUNCmikjVQnmSikhnJhCDwfaALASIE0gIy83jkhjV2jyaEVs7XWABc8tCheooBvHgRqswJET1sQ6eI1Xr32NtRM2Yn6.HRiJx5TFpYlK_AkQkVf6Bd3zlDjaHOvEqjssOgZaXim6ZseeiGHusF1eB9ajjyaGnoqqC7dGBUaJX8B.EvozFuJLzK7CaOIBNyt7SMpZPkumnelbTgZC1wFLs.WxCcLC1eAVOLTkN9
2024-12-17 10:52:01 UTC	560	IN	Data Raw: 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 69 6d 61 67 65 73 5c 2f 59 6f 75 4d 61 79 41 6c 73 6f 4c 69 6b 65 2e 70 6e 67 3f 5f 5f Data Ascii: gth).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/images\/YouMayAlsoLike.png?__
2024-12-17 10:52:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49871	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:02 UTC	381	OUT	GET /movies/12328215740-poster-The-Undeserving.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:02 UTC	923	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:02 GMT Content-Type: image/jpeg Content-Length: 21231 Connection: close Last-Modified: Mon, 16 Dec 2024 04:37:13 GMT ETag: "52ef-6295bbc06342e" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3377 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbMyqqjey%2Fmg%2B5vhe5eD%2FckczCIpOVsbbagi2n6v4wWyTuwlaIpQnyWjT%2FcMWtvJtsSbd1L%2FZ0gL7gVnM7Ey7uoE1h%2FR5AaRtQhdsiMxxxosYI%2FIfmdZyJtHZXhdqXY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c850c7b8ce3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1806&min_rtt=1800&rtt_var=687&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=959&delivery_rate=1578378&cwnd=252&unsent_bytes=0&cid=1ecd9dc66d819085&ts=449&x=0"
2024-12-17 10:52:02 UTC	446	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 07 05 06 06 06 05 07 06 06 06 08 08 07 09 0b 12 0c 0b 0a 0a 0b 17 10 11 0d 12 1b 17 1c 1c 1a 17 1a 19 1d 21 2a 24 1d 1f 28 20 19 1a 25 32 25 28 2c 2d 2f 30 2f 1d 23 34 38 34 2e 37 2a 2e 2f 2e ff db 00 43 01 08 08 08 0b 0a 0b 16 0c 0c 16 2e 1e 1a 1e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e 2e ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 d3 77 13 23 4c 20 Data Ascii: JFIFC!$( %2%(,-/0/#484.7./.C...................................................Jw#L
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: b6 16 1d 49 7b 2d 48 a9 5a 8a 51 e2 88 b4 73 3e c2 a4 27 9a b7 ca b5 63 56 a5 36 b3 ec 1d 60 2a cf 53 1f 55 5d 39 68 e1 88 d8 6e 06 f3 87 23 bc ea 88 73 e0 ec 78 bb 75 b2 e9 bb 32 ee 70 36 e4 cb d7 16 e3 b1 ac fa dc cf a1 0e bf 9f ed fc cf 49 3b 5c 6f 67 12 1b 61 01 20 45 a6 ae 1e be 6e de 60 2b 9d ac fa 88 50 6b 26 23 47 22 d0 d7 9d 3d 32 d0 cf 4e cb 8b bd a2 d5 a9 c6 bc c3 53 85 b7 23 11 da f6 5d da 9c dd b4 db ce dc cf 9b 23 58 48 7c df 67 0d 1c c8 1a 35 2c ee a6 bc 77 5a 33 1d 10 e5 dc 77 7f 2d 77 f3 b8 df 9f e7 7d 9e 7e ef 3e e7 9d 18 9d 33 74 ca c0 c4 e8 85 e4 b1 a6 af 37 ad ab cd d2 da cb 5a fc dc ab 58 7a e7 81 d5 c5 02 15 cd 5a 80 62 37 62 3a 45 59 59 0f e5 d0 ec 37 e4 e9 1c 7c a7 bf 83 73 9b 76 26 f7 f3 df 35 ba 54 d9 5e 4e 98 51 68 e7 3f a7 a5 Data Ascii: I{-HZQs>'cV6`*SU]9hn#sxu2p6I;\oga En`+Pk&#G"=2NS#]#XH\|g5,wZ3w-w}~>3t7ZXzZb7b:EYY7\|sv&5T^NQh?
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 93 d9 8e 57 6f 30 f4 9d 9f 3f d1 6f 0d d5 d6 07 4b 53 93 a1 2d b1 cb ea e6 15 cd 59 56 a9 4b cd 5a 2a f3 a1 e7 5b 4d 16 34 6f 2d 5a c6 9d c4 a7 7f 9f cd fa 5e 75 71 d3 7b 8b 5e eb 96 f8 ae a8 e7 7a f3 5f 6c fa 6f 1f d9 36 7a 12 5e 5f 57 3e a7 27 4e 67 57 3e 6f 57 3a da 66 3a 91 52 b0 fc 10 91 e3 66 b2 e8 34 6a c6 7b 4a a2 c2 7b 11 5f 4b c9 e7 fa b8 c9 96 9d f7 95 d1 d7 7a 5c 5c 4e 1b f1 9d 52 1b 9e 9f c7 f6 d4 d2 57 d3 35 37 c5 fe 7d d7 d3 24 76 c2 94 85 52 2b 89 08 61 33 b3 c6 e6 8d ac 10 34 76 e3 d5 e5 f4 d9 cf 54 bd 4f 9e cf 25 9c 37 d4 e3 eb d5 83 37 6c 71 fb 39 83 ac 6f 79 9e cd 26 81 a6 4b eb 93 b8 6e 1b c9 2d 70 ad 14 6a 95 22 a9 ab 9b cd 16 74 15 e4 37 17 9b 0e 98 ea 72 fa a6 72 87 77 8e 3c ed de 6e d3 e5 b1 a2 95 df 99 5e 8e 61 dc b3 cb df b3 c5 Data Ascii: Wo0?oKS-YVKZ*[M4o-Z^uq{^z_lo6z^_W>'NgW>oW:f:Rf4j{J{_Kz\\NRW57}$vR+a34vTO%77lq9oy&Kn-pj"t7rrw<n^a
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 4d e7 9e 77 69 ce 65 f8 97 24 fd 1f 7e 0f 9a ee 3c 9c ca c7 8e 33 b5 bc ec 91 1a ee d1 b7 35 da be 88 78 b5 aa a6 14 9c 65 14 39 0a bd b4 f1 c9 8c cc 3f 6c df df 8f f6 d1 be f1 a5 53 f5 48 9c 46 da a2 f1 c9 1f 32 a5 e4 7b 36 6e 2b 22 b4 c7 66 95 51 5a c6 68 c4 c3 0b 6e 32 be 3d c7 a1 be b1 52 1e 50 ae f1 04 af ca d0 a2 05 13 53 c7 ee 37 a5 20 1a 9c 4a 8a a4 6f 2d 58 9f 10 bc 66 84 f4 a8 f2 a7 2c cf de de ee d3 ce d1 de a4 02 71 da 6d 29 f9 43 b4 56 8c a1 dd f6 df 62 62 93 3f 28 3c 4e 50 98 4f 4d e6 31 fb 33 fe 33 6b ed dd 16 97 68 51 84 28 c0 4d fc 23 92 13 cb af 4d 96 22 8d f6 8a c0 4b 6e dc 28 f2 78 c1 07 b0 cd fa 62 9d eb c9 5d d7 3d f9 ae 39 52 fa 66 a0 94 8c 9c 93 6b db 66 f5 8d c8 5a f6 9d b4 b4 0a f8 8e 9b c1 0e c6 6d d0 b1 9b c1 ee da 6d 28 3b 1b Data Ascii: Mwie$~<35xe9?lSHF2{6n+"fQZhn2=RPS7 Jo-Xf,qm)CVbb?(<NPOM133khQ(M#M"Kn(xb]=9RfkfZmm(;
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: a7 ed da 4f 6e 6f 87 0f a7 18 b9 3a 42 e9 f6 4d a7 2b 89 81 7c 85 13 f9 78 7e 88 e0 8c 7b 47 03 f9 78 b7 67 1a e8 94 22 fc 9a a5 59 29 08 d4 78 45 14 71 fa 89 b5 da 3c bb 62 46 05 f2 22 24 6a f5 1e 8c 7a f2 c9 64 9c bc b2 19 f2 43 c3 34 f9 fd 68 df e4 66 ab ff 00 2b 17 93 50 ba 1e cd 6d 5b e2 d3 cb 27 68 68 e4 f8 f1 da 38 e4 fc 21 e1 9f e8 71 92 f2 24 a8 a1 23 04 7e 46 7d 5c b1 cf 8a 42 fe 23 2f fa 99 67 2c d2 e6 56 ca 4e 3e 0c 3a c9 45 d4 fc 1a 87 79 59 0f b9 19 7c 0c 8d 4f c1 e9 25 e4 7d 0e 4c b5 f9 1a 2d f8 df 16 24 85 b4 8c b8 d7 94 46 54 46 26 1f 26 7d 32 cb 1a fc 9c 1f 3e 0c 8d 45 52 25 c5 ae cc 98 b8 f6 bd 98 55 cd 19 17 46 6c 9f 85 b6 39 c9 ae c9 32 ac 58 45 81 19 71 f0 7b 62 57 21 16 39 a8 f9 39 c5 f8 64 d5 aa 1a a3 03 b5 46 35 d8 da 5e 4d 7e 15 Data Ascii: Ono:BM+\|x~{Gxg"Y)xEq<bF"$jzdC4hf+Pm['hh8!q$#~F}\B#/g,VN>:EyY\|O%}L-$FTF&&}2>ER%UFl92XEq{bW!99dF5^M~
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: da 28 ca ba 23 1e ce 24 d0 c4 35 43 da c4 c8 b3 2e 67 cd d0 b3 c8 fe 60 73 e5 2b 16 7c 7f b3 53 96 2b 13 e2 fc 8b 6d 3f 8b 18 9d 99 a5 6c 7b 46 74 c8 fc 95 a3 2a e8 aa da 63 2a b7 93 2c f5 11 17 62 8d 3b 32 79 f6 48 42 21 d2 a2 cb a3 2b f9 0c 4a d9 c6 8c 79 1c 09 e5 b2 59 3a 3d 41 ca c9 0e 42 92 43 63 7b 51 8e 3d ed 4e 47 16 7a 67 a6 3d a0 bb 2b a3 f1 b4 fc ed 8f ee 39 16 32 c5 26 36 73 76 32 fd 96 5b 1c 99 cc e4 ce 6c f5 1e ea 54 7a 8c e6 73 24 ef 68 1c 8e 45 ed 64 a5 b7 e3 fb 44 59 65 88 77 17 4c 94 ec b3 91 62 4e 5d 2d f2 e1 78 d2 6f f3 fd 9d 9c bd b8 f2 4a 0e d6 f9 5c 9b f9 6d 43 fe c3 af a3 39 f3 77 b6 a2 50 93 5c 7f 5e f5 16 fc 7f 67 5f 45 49 c7 c7 ff 00 07 4f e5 fd 6f ff c4 00 29 11 00 02 02 01 03 03 04 02 03 01 01 00 00 00 00 00 00 01 02 11 10 03 Data Ascii: (#$5C.g`s+\|S+m?l{Ftc,b;2yHB!+JyY:=ABCc{Q=NGzg=+92&6sv2[lTzs$hEdDYewLbN]-xoJ\mC9wP\^g_EIOo)
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 42 ef a2 8a 28 db 9a 36 9b 4a 16 19 45 76 2f d9 a2 b0 a2 51 45 1e 32 a5 7f b2 d5 e6 29 7d 7e e2 55 88 26 bc f7 b9 25 fb 8e 29 f9 ff 00 c1 d6 f0 be 6f ff c4 00 3c 10 00 01 03 02 03 07 02 03 06 04 05 05 00 00 00 00 01 00 02 11 03 12 10 21 31 04 13 20 22 41 51 71 32 61 30 81 91 23 40 42 62 a1 b1 14 33 52 d1 50 53 92 c1 e1 05 24 82 b3 f0 ff da 00 08 01 01 00 06 3f 02 50 c6 97 78 59 d0 7f d3 1f e4 bf e8 ae 75 27 80 3d b8 25 ac 27 c0 50 f6 96 f9 c2 77 2e 8f 0a d2 d8 38 5c 18 f3 f2 4f 07 a6 58 9a 8d 61 21 49 a2 f8 44 11 04 64 83 40 92 57 f2 1f f4 40 d4 61 6c f7 e0 6e d0 ca ce 05 f4 f3 e5 9e a9 a0 bf f1 06 fa 7d ca a6 33 e6 60 76 6a 95 22 60 3d c1 aa ed eb 49 b7 fa 11 a2 ea c2 d3 c9 e9 e9 1f dc 70 16 8a 84 06 c1 6c 8e ed bb f7 0b 7a e7 c9 11 02 23 5f f9 9c 29 4d Data Ascii: B(6JEv/QE2)}~U&%)o<!1 "AQq2a0#@Bb3RPS$?PxYu'=%'Pw.8\OXa!IDd@W@aln}3`vj"`=Iplz#_)M
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 8f 79 73 ae 2d 1e d9 a1 4d cf fb 63 48 d4 0e f7 69 5b 1d 3d e7 2d 4a 77 3f f3 2a e6 93 ad 7d e3 30 a9 d2 ab 50 be bb 6a ce 63 f0 f1 6d ed 61 33 96 9f aa ac 39 80 de 34 2a 56 cf bc 2a bb db 85 4a 75 5c 44 f6 28 b9 c4 97 38 ad 89 bc fe 89 3e 55 06 b8 9c a9 4f cd 51 aa d0 e7 7d bf a7 bb 55 1d a6 a5 db da cf 74 ca a0 d6 07 54 a1 b4 34 17 b6 35 94 fa 0c cd ba b5 51 a4 03 dd bd d9 60 fb 3b ba 65 26 dd 9d 36 b8 cf 75 b0 59 55 cc 9a 7c e6 d5 46 b3 75 ab 4c 13 96 be e8 d3 07 95 ed 32 b6 1d 95 ce f4 b2 e7 79 54 e2 63 aa aa e7 cd c5 e7 55 ff 00 4e 0f ba c2 c2 1d 3e eb 66 a3 77 23 69 ad a0 30 9f 58 1f 2c 95 e6 93 43 ea 3b 75 a7 48 e2 75 cc 2e 63 f5 8d 42 14 29 53 70 17 4b 8b 95 4b 98 e7 17 44 42 7e d0 e1 52 c3 4c 08 19 66 98 e3 d0 ca e7 de b4 4f e1 66 a9 d5 c8 21 b1 Data Ascii: ys-McHi[=-Jw?}0Pjcma394V*Ju\D(8>UOQ}UtT45Q`;e&6uYU\|FuL2yTcUN>fw#i0X,C;uHu.cB)SpKKDB~RLfOf!
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: d0 c9 4b 04 35 17 44 15 19 fd 7c 42 b6 8f 52 b3 d3 b4 25 de 7f ac fd 9d 39 8a bd 0d cf cf 06 26 68 81 4a 68 8b 34 28 9e 20 1f 2c b1 91 01 39 4a 0c c1 f4 44 94 98 71 b3 89 e4 26 1e 27 02 6c bd a5 6a f2 b7 6c 40 79 36 2c fc cc 03 5c 78 9c 66 74 cd 68 71 81 aa 8d b4 ef 00 47 01 99 25 b8 e2 91 ab 70 f0 c6 6f 84 17 5b e6 5b b4 65 49 9e ac 96 bb e3 40 1d 06 48 9d 14 36 c2 73 1d e9 89 6e 58 97 88 81 e9 62 11 0d 83 43 33 2d e1 64 bc 60 e1 09 50 8a 2f f9 95 30 be 6f 98 a0 77 3b c3 e8 17 e2 26 0e 59 60 ac a6 8e 25 1d 51 99 56 34 a2 06 7a 16 54 bd c4 6e 54 10 f0 4a 08 46 7b 10 64 f2 ca cd 73 15 a4 b9 b9 40 bf 51 b9 74 15 87 73 b5 ae 6e 5f 7e 40 79 87 b3 37 67 0a f1 0a 9d 39 0a 86 c3 0a e5 78 e3 cb 36 05 41 0b 17 41 94 66 d1 e4 43 49 a3 24 d7 94 a6 ee 5d 37 00 52 b9 Data Ascii: K5D\|BR%9&hJh4( ,9JDq&'ljl@y6,\xfthqG%po[[eI@H6snXbC3-d`P/0ow;&Y`%QV4zTnTJF{ds@Qtsn_~@y7g9x6AAfCI$]7R
2024-12-17 10:52:02 UTC	1369	IN	Data Raw: 6e 67 98 1e 07 b7 7e 62 aa a1 a7 93 97 f1 29 a7 21 47 03 8d 60 88 c3 74 fe 31 85 f6 ee 3c 10 f5 0e c2 b5 ce d3 c4 a1 58 77 1b d3 71 01 5d c1 16 c8 f1 9c aa 2d e3 77 08 dd a4 e2 76 7f f1 1b a8 70 e2 f8 65 bb db 8f 7b 51 fc c5 57 91 29 c9 52 db bd 1b 3b 9e 16 0b 9c 0c fe 25 c0 6d b3 dd d7 f1 15 58 d4 38 4d a1 02 28 95 06 6c fb 98 01 98 42 1d 37 ba 03 c2 73 14 d4 05 56 b4 04 47 c5 81 ed 7f dc 39 df c5 03 e7 53 63 15 40 2a 20 6f 65 3e 5c 41 76 39 ed 42 8a f3 84 7e 17 33 f9 81 ac 6b 86 07 1d d1 b6 43 32 bc 98 0d 0f f3 07 0a c8 fc 50 e3 98 74 b3 97 99 6b 71 79 8c 3c 56 03 2b ef 35 26 a6 b1 dd 2f 04 d7 e3 19 53 88 15 55 15 54 ac 31 3e 59 48 4a 22 72 39 a9 e1 ed 91 39 f5 01 ea 17 ee 5c 78 8a 4b be 4d 94 b9 7b 7a 12 9f ee 7a 74 b0 fd 00 5c 04 a3 98 12 89 88 6d 99 Data Ascii: ng~b)!G`t1<Xwq]-wvpe{QW)R;%mX8M(lB7sVG9Sc@* oe>\Av9B~3kC2Ptkqy<V+5&/SUT1>YHJ"r99\xKM{zzt\m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49873	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:02 UTC	376	OUT	GET /movies/12327191509-poster-Martingale.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:03 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:02 GMT Content-Type: image/jpeg Content-Length: 19184 Connection: close Last-Modified: Mon, 16 Dec 2024 04:37:00 GMT ETag: "4af0-6295bbb3fe1b2" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3377 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQUlM5VvenX5rb8Q9wxWUcgUX7YHK62QyLNNgUGfM3qUxt%2FW9NzcOpWD2wkm7EzoZIUT0R2BTnQUvatL1rdjxLT531Oazx9%2Fy6uo%2BTVQHOYDZiW81TG%2FNoAmAQBkps4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c85cf0872a5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1785&min_rtt=1775&rtt_var=686&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=954&delivery_rate=1571582&cwnd=203&unsent_bytes=0&cid=1f05bc556b9a293f&ts=448&x=0"
2024-12-17 10:52:03 UTC	452	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 01 07 07 07 07 08 07 08 09 09 08 0c 0c 0b 0c 0c 11 10 0e 0e 10 11 1a 12 14 12 14 12 1a 27 18 1d 18 18 1d 18 27 23 2a 22 20 22 2a 23 3e 31 2b 2b 31 3e 48 3c 39 3c 48 57 4e 4e 57 6d 68 6d 8f 8f c0 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 04 05 06 03 07 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c2 f6 fc aa 43 03 b4 e0 e0 e3 40 e8 70 Data Ascii: JFIF''#" "#>1++1>H<9<HWNNWmhm''#" "#>1++1>H<9<HWNNWmhmJ5C@p
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: d8 d2 5c dc 84 24 c6 a7 92 42 21 5e 67 d1 ea 7c 1f 41 79 9f 59 21 31 c1 01 a9 03 40 d0 0b 8c e2 00 c8 31 f4 4d d0 68 e6 28 b3 8f 91 fa 1f 3b 9f d5 9b 98 c0 72 a3 07 69 dc 4c 5d e2 fd 03 91 da dd f2 fb 32 54 d2 48 18 1c 1c 66 00 ce 44 58 39 91 a7 d5 9b 3f b3 0d 55 f9 e3 4e 1a 2c 5b ac 68 bf cf 3b 1c 5a 2d 54 71 0e 4c 99 04 ed 11 13 1c e8 4f 53 cf e8 6e b9 5d ae 8a 5d 23 27 07 89 d0 7d 54 8d 37 69 80 59 1a 70 f3 ce cf 07 1d d2 e6 00 90 dc 12 7c 5a e4 df 11 73 64 ea db 88 9a ee 8b 1a ae d0 62 db 3a bb a3 ce ab 6c db 2e b2 ee 93 09 9c 59 0c 80 93 40 63 61 63 3a 9c 8f 3c ed 70 b9 b4 20 22 61 f3 18 35 c8 7c 99 3e a9 10 8c 46 ce 83 71 5a e7 ba ce 8d 35 ba 33 68 b0 74 ee 32 ec 70 34 fa 29 49 ae c9 11 b2 5d 73 e8 99 37 9c db cf 01 63 7a 5c ac a7 43 9a 00 23 01 f3 Data Ascii: \$B!^g\|AyY!1@1Mh(;riL]2THfDX9?UN,[h;Z-TqLOSn]]#'}T7iYp\|Zsdb:l.Y@cac:<p "a5\|>FqZ53ht2p4)I]s7cz\C#
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: ba 27 79 9e e9 32 56 25 79 f8 de 17 66 e5 7f 03 8f 9f e7 e7 bb 99 35 58 35 d2 74 f0 4a c5 af 1f d9 c7 3f 1e fd 46 3b f2 fb b0 8e a7 ee 7a 6b 70 71 10 dd 88 49 88 44 9c 5c fb 4b 83 e9 fc 8f 4e bb ea a5 6a a4 61 55 1b 65 db 86 b6 fc 9c b1 f9 5e 71 b2 af 43 aa db 93 a7 3c 9b b0 a6 be 54 fb 28 15 a2 cd 59 f4 45 88 5c 3a 29 38 90 90 38 21 74 85 b0 79 dd 9e f9 35 e4 32 f5 e9 af 45 1d 16 84 6b c7 65 2c 30 64 68 a8 f2 78 8c 95 d4 fa 0a 22 05 94 27 95 d0 bd 03 9b 6e 7b 7e 48 86 ff 00 59 e3 ee ce 74 79 15 f0 b3 b7 5f 05 ad 86 c8 be 54 6d 40 71 9f 3e 7f 6b 86 5d bd 29 b7 3f 46 aa cb 1e 75 ed d0 2a a8 67 3b f7 cf ad 85 f6 76 e0 ae c5 c3 f3 8f 4f c3 d1 f3 b4 64 3a 50 d3 73 76 77 cb 2d 3c cf 2d eb e0 97 54 eb a7 5d 56 eb d5 89 91 b0 b7 0f bd 64 d3 3e bd 27 cd ed 54 64 Data Ascii: 'y2V%yf5X5tJ?F;zkpqID\KNjaUe^qC<T(YE\:)88!ty52Eke,0dhx"'n{~HYty_Tm@q>k])?Fu*g;vOd:Psvw-<-T]Vd>'Td
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 1f 4d 9f 43 35 f6 75 35 f3 f9 9e 7d 3c cd 9f ba 3c 10 63 e3 d4 f5 9e 35 a7 37 0b 32 52 b4 a8 91 a2 4e a3 51 59 a3 d9 1a ba bb 05 c6 32 57 72 37 25 a9 17 25 83 63 0a ad 36 6f e8 8c 86 ad b0 eb 46 ee 2b e4 70 4c 90 03 63 63 da 87 8d 29 db c8 e1 6d 54 fc 45 c7 59 5d ba 18 57 5d 76 d6 e8 e9 64 a7 1a 96 c7 d4 3e 3c 4c 6a 68 7a 2b 62 de 58 ce 9e 95 bf 70 3e 51 5a 72 08 19 26 96 28 d5 7a 50 ff 00 52 c4 96 a0 ae df 19 9f c5 2b 1f 93 31 0f b0 ac b9 38 58 cb 3f fc d2 94 09 4e eb 62 c4 b1 38 1f fd 26 57 f3 bc c0 fc db 32 ff 00 c9 31 2f 34 de f2 da d2 c0 b6 0e 9b ad 59 33 bf c9 69 4e 17 79 03 04 41 dd 98 0d ee b1 4e 75 7c 2f 26 61 ff 00 8a 9e 9d 34 10 f6 83 73 d0 99 bb b0 8f c9 f4 5d 6c 6d dd 05 c1 d1 ac 0f 78 73 7d d5 3d 64 0f a7 d9 d4 c6 74 ac b1 6c 97 ae cd 15 ef Data Ascii: MC5u5}<<c572RNQY2Wr7%%c6oF+pLcc)mTEY]W]vd><Ljhz+bXp>QZr&(zPR+18X?Nb8&W21/4Y3iNyANu\|/&a4s]lmxs}=dtl
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: f8 34 a7 05 3e 37 b2 60 d9 f0 16 ab 19 80 09 d2 c2 71 7b 31 73 54 a8 58 b9 ab 6d a2 a9 7f e3 53 fa f4 d4 c8 a4 77 37 18 72 d3 4c 3f 6b 32 c2 26 42 ec ba 4a bd 8e 56 5e 0f 1b d4 3b 77 53 90 c7 b7 85 c8 27 56 c7 6b 6c c6 e3 d2 de 94 c9 bb b9 7f 53 0e ee 03 e5 5a f5 9a d3 26 ba 12 8a 46 3a da 56 b5 ac 59 80 ed 8b f1 36 62 e1 74 db 29 47 3b d9 d4 5a 53 b6 49 ac ad 40 91 5e 5b ed 44 b6 d0 2e 0a d5 e1 ba fd 49 d1 6b 57 ea 23 59 0d e7 d0 98 0c c8 01 96 5e ba af c5 0f f5 07 a5 e8 79 0b 05 aa 05 8a f2 d2 19 38 ca 18 11 c4 55 5f 33 5c ea 8d 62 e3 f3 43 c0 50 1e 61 de d7 d1 5a 1f 84 56 a0 5a 99 19 7e f6 18 cc b7 f0 f8 c8 99 a2 cc 46 2f ca c6 f2 17 c1 9f 89 dd f6 76 e0 00 f1 40 30 03 e5 d7 4b 17 6f 88 38 e3 fd 3a 9f 5b 2d cd e7 df 37 2f b3 8a 4a 9f 7e 61 f7 1d cb df Data Ascii: 4>7`q{1sTXmSw7rL?k2&BJV^;wS'VklSZ&F:VY6bt)G;ZSI@^[D.IkW#Y^y8U_3\bCPaZVZ~F/v@0Ko8:[-7/J~a
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: e1 c4 67 c3 b8 66 50 ac 5b 1e e1 1a 2b 6d d0 04 6b 62 89 a8 ba 19 df aa 00 62 ba a5 62 4e 2b 59 6e a8 81 9e e1 3e b0 bd b6 b7 c3 fa 9a 8d 47 13 0f a2 27 e1 e2 54 b7 91 db 75 f6 ae 5d 90 cb 2b 17 cb 52 79 94 1e 5c 7b 2c 3a 8b 1e a8 86 a8 39 6a d7 21 fc 91 65 30 e1 b0 8f 0e 09 65 7f 17 5e b8 67 a8 d1 5b 4d cb 43 42 be 8a ae 06 a9 9c 1d 53 5b 94 9e 11 aa 70 0c 69 92 d4 43 72 f3 40 d5 53 ee 4f 9c 86 18 d4 38 40 12 9b a7 85 a2 a6 60 16 86 ea c6 a7 d7 55 63 b3 98 5a b9 52 64 23 fc 63 9a e2 c4 3f 4a c3 32 f3 c2 d2 6c b1 8b 71 4b bc ba 23 9f 11 dc 94 ba 74 4f ca de e8 94 4c 3a eb 01 d0 76 1f 03 ca 10 bf f8 4d d4 fe 55 b3 4b 7d d7 3a 6c d5 c1 5f 34 4a fb 8a 33 29 c3 3f 64 73 62 cf 0a c3 cb 94 41 29 cc 6b 86 87 54 43 4b dd 74 25 ec 22 17 9c e8 9e 00 04 c2 33 03 44 Data Ascii: gfP[+mkbbbN+Yn>G'Tu]+Ry\{,:9j!e0e^g[MCBS[piCr@SO8@`UcZRd#c?J2lqK#tOL:vMUK}:l_4J3)?dsbA)kTCKt%"3D
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: e1 08 e2 cc 66 51 86 27 e5 50 f0 54 a8 91 23 12 5d 0c b8 8b a5 b1 5b bb 5c bc b2 e7 73 97 f9 22 a9 4a c6 5c 19 7e 13 c3 2b c2 7a 9a a1 a6 e9 d3 2c ba 64 0d 32 f6 c1 7f 40 dc 1f 74 81 ad 5c 0a 1b 5a 23 f6 92 e0 da c5 4a 40 60 7b 54 08 ba 85 1c be 25 7b 8d 3d 2a 2b 8d 0a c6 ef e8 71 14 8b 31 95 29 f5 0d 7b 76 a6 1b 81 6d da 01 90 40 a6 8d 88 97 ec 48 e4 05 b8 0c 0e 88 11 70 17 2c bf 99 9b 1d 08 56 1a 6a 04 b5 de ca 39 24 29 45 23 4c 42 d5 9b ca a2 12 00 55 07 12 ff 00 7b 04 45 ad 09 73 09 ee 21 c5 0c af 19 cb c9 fa 33 3b 09 3f 05 db fb 7c 26 6b cd 25 ed c1 07 76 78 e9 89 c5 0d 9f 0c 6b 6d 7f cc 4b a4 9d 98 ac 36 c6 9f 38 fe 59 fd 44 ac b6 a4 08 ee 3b 6a 3f 7b 22 e8 52 83 92 b5 3e 6e e4 2f c3 fd 61 0a 99 44 e0 90 ec 42 a9 58 12 69 49 ba d2 ef 99 47 18 6b fe Data Ascii: fQ'PT#][\s"J\~+z,d2@t\Z#J@`{T%{=*+q1){vm@Hp,Vj9$)E#LBU{Es!3;?\|&k%vxkmK68YD;j?{"R>n/aDBXiIGk
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: dc 0a 44 a3 f1 02 45 8d 8b 8b 47 3e d2 3d 61 ba fa 48 a4 f3 62 2a 7e 25 05 df eb 13 16 6c 11 f6 cc 00 8c 14 df dc 29 51 5b 3a 48 48 2d 9b d4 37 24 db c3 ea 02 bc 75 96 a1 0c 7b db 03 04 05 3a 2a 0c 37 15 e6 5e 68 8a 71 08 ea da 33 51 1e 58 64 62 04 2a 32 50 77 16 62 a8 be 11 90 c8 db f0 10 8b 11 ba 80 01 42 a2 df 05 98 cf d7 73 91 9d 74 3f b9 c9 1e d7 4c 4e bb aa 62 83 ec 94 d1 a0 fe fd ff 00 32 f8 91 a1 e8 65 c5 c8 4b dd 32 c3 88 a3 8b e1 48 d0 68 8b 39 75 73 12 db 74 2d a6 2d 04 98 06 29 38 e3 12 ad 66 94 ae ec a1 2c 45 4f cb 89 75 dc a7 49 69 7f a4 45 5b 4b 12 44 aa 46 33 11 80 21 06 25 2f 32 a2 15 e5 83 79 60 95 1f 2c a5 d9 1d b0 ce 93 d6 2d a6 1a 8e bf 50 73 2e 83 28 9f 24 1a ab 96 2a 9d 1f b8 cc 56 0b 2e af 6c 62 39 91 57 a4 4d c2 84 fb ba ff 00 21 Data Ascii: DEG>=aHb~%l)Q[:HH-7$u{:7^hq3QXdb2PwbBst?LNb2eK2Hh9ust--)8f,EOuIiE[KDF3!%/2y`,-Ps.($V.lb9WM!
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 49 46 fd 28 c4 1a a7 80 2b 71 5e 0b e7 a5 18 24 fd 93 5e 0b f9 a9 a6 81 c7 91 a3 11 a2 08 a3 9a c9 ac 9a 86 fe 58 c6 3a 8a 6b c9 4b 64 31 15 6b 79 e2 7a af 80 7d 3c d0 f4 48 06 bc 35 27 38 a0 30 29 a3 56 39 22 82 28 39 c5 62 b6 8a 2a a7 a8 af 05 31 d2 9e d6 32 38 5a 9a d8 a9 e9 46 33 45 48 ac 50 15 10 25 86 2a 3c 94 5c f7 63 d2 f3 ac fd a6 29 a2 46 ea 29 ed 23 61 d2 9e c1 4f b2 68 d8 c9 9a 5b 07 23 93 56 f6 9e 19 cb 0c d0 1e 9e 7b c1 f4 ee 67 9e 3b 88 11 53 ea d9 1c bc 98 dd b4 af 41 8f 8d 36 a7 ac 00 36 da e7 da fe ec f9 4a 10 7f f5 a5 d4 f5 72 a5 be 8a 0e 23 89 8a ed 2a 49 6c ee 03 3e 62 9a f7 54 59 64 1b 01 45 b9 8e 3f bb 3e c3 2e e2 d4 97 ba b0 92 14 96 00 3d 66 0e ea a4 a9 01 72 18 77 b1 c0 e0 53 c9 3e 78 5a 84 c8 7d a1 ff 00 45 21 65 47 2a b9 60 a4 Data Ascii: IF(+q^$^X:kKd1kyz}<H5'80)V9"(9b128ZF3EHP%<\c)F)#aOh[#V{g;SA66Jr#Il>bTYdE?>.=frwS>xZ}E!eG`
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 0a 18 30 60 ca 2b b6 1a 26 ab ab 4f 68 2d 21 56 8e 24 39 25 c2 f2 d5 d9 9b 4b cb 2d 22 1b 5b b8 c2 49 1b 30 18 20 f0 4e 6b b6 3a 36 a9 ab 35 9a 5a 42 ac 91 06 2c 4b 05 e5 ab 45 b2 d5 f4 fe ce cb 68 d6 ea 6e 57 78 89 77 8c 1d f5 a1 a5 ec 5a 65 b4 37 b1 84 9a 25 d8 70 43 02 17 a1 ae d1 76 69 75 09 ed af 6d 80 17 31 c8 9b c7 40 ea 0d 6b 7a 45 be b1 66 d6 f2 92 39 dc 8e 3a ab 57 67 ac f5 4d 16 09 6c ae 2d 8c d0 87 2f 14 b1 10 7a f5 04 1a d5 3b 39 a8 6b da ba 5c ce a2 d6 d9 14 22 82 43 48 40 f8 0a bd 4d 58 ea ba 69 82 d8 3d 9c 19 2e 4b 80 49 61 8c 81 f0 ae d4 58 dd df e9 12 5a da c2 af 24 8e bd 58 2e 00 39 ae c8 e8 ba ee 91 79 28 b8 81 7e 8f 32 e1 88 70 70 c3 a1 ad 6b b2 fa f5 fe b5 73 78 96 e9 b1 a5 05 7e b0 7b 2b 5a cb 76 8a ea d4 db 58 d9 08 b7 8d af 2b 4a Data Ascii: 0`+&Oh-!V$9%K-"[I0 Nk:65ZB,KEhnWxwZe7%pCvium1@kzEf9:WgMl-/z;9k\"CH@MXi=.KIaXZ$X.9y(~2ppksx~{+ZvX+J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49874	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:02 UTC	1385	OUT	GET /images/mask-title.png HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/css/main.css?v=4.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:52:03 UTC	900	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:02 GMT Content-Type: image/png Content-Length: 972 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:08 GMT ETag: "3cc-59c3156d9d400" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5507 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w46ZqaWdkyUbVglVRB9lP7QFbknGcVv%2FVvGaS7E07RfwVvfdrFF8LKWsLHT%2BlDCX%2F7B%2Fu1%2FouZBUE%2BxwCUTl00kQ1ggmida1zdFg455fPffCKh9Id%2BzvmJru9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c85eb44ef9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1935&min_rtt=1931&rtt_var=732&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1963&delivery_rate=1486005&cwnd=121&unsent_bytes=0&cid=337c7143716f4d86&ts=447&x=0"
2024-12-17 10:52:03 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 97 08 06 00 00 00 d4 2a 31 d7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR*1tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-12-17 10:52:03 UTC	503	IN	Data Raw: 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 45 45 46 31 31 35 31 34 31 46 35 31 31 45 35 39 31 42 46 43 37 35 43 32 31 31 43 42 32 39 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 45 45 46 31 31 35 32 34 31 46 35 31 31 45 35 39 31 42 46 43 37 35 43 32 31 31 43 42 32 39 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 45 45 46 Data Ascii: .adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AEEF115141F511E591BFC75C211CB29E" xmpMM:DocumentID="xmp.did:AEEF115241F511E591BFC75C211CB29E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEEF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49875	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:02 UTC	371	OUT	GET /movies/12315497092-poster-Don-Q.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:03 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: image/jpeg Content-Length: 20738 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:52 GMT ETag: "5102-6295bc90bc26d" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3378 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ry1eIxMPL9turslddScnA2y5Ahc%2FtWVMm0yLM8wZcA%2Fe3enJ07%2FPdGkZLErSxvKyxh5okK33TsHCGeytZqvKlHXsKPiJc1EL97mDiwPOeHzx4rds11S9lsv55t7Pfkg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c87db9f4257-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1708&rtt_var=644&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=949&delivery_rate=1694718&cwnd=215&unsent_bytes=0&cid=a4873e1c746e315a&ts=447&x=0"
2024-12-17 10:52:03 UTC	454	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e7 39 fe dd 0d 81 d0 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""J9
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 56 ad b2 42 b9 5e a4 3e 9f 99 ce ea 79 3c df 37 f4 9d e9 12 f4 5f 39 c2 e7 fa 1b 7a 0e 7e 2e 77 a1 b7 8e ed 75 7a 8e 5f 3f ac e4 f3 7c ff 00 d0 76 7b de 07 1f 23 5e 9d 8c 79 69 ed b2 af 46 ce 0b 6f 57 d3 7c bf 12 8d f6 e5 ea ba ed 35 ee e1 cd c1 f7 3a 1c ef 47 52 15 ba f4 da aa be cf 8d ca d4 c9 9b 98 ea 6e d1 cd 56 ae 5c de 7d e8 3a dd 77 27 0d ca 2b e5 3a db fa 5e 66 12 23 cc f4 ba 1d 97 1f 99 c0 f7 ba 9a 39 e8 ec b9 98 30 bb 7a 3c e7 77 47 bb e1 e2 e8 f9 d9 79 7e a6 be a3 99 92 29 bf 31 f4 bd 3a f6 5c 85 6a bd 33 57 0d 2c d9 e3 94 21 95 33 46 fc dd 36 e7 5f 4c f0 bb 57 2e 6b 94 c0 65 a7 0f 74 ee d1 96 f5 16 e7 e8 86 6e 9b 35 32 c6 d3 58 1a 65 2c 2f d0 cf 8a f5 35 6f 62 57 68 a7 2f 54 f8 5e df 46 45 3b 15 e8 40 c1 14 ab ad 3c b6 e1 a8 d4 e8 d9 8a 45 63 Data Ascii: VB^>y<7_9z~.wuz_?\|v{#^yiFoW\|5:GRnV\}:w'+:^f#90z<wGy~)1:\j3W,!3F6_LW.ketn52Xe,/5obWh/T^FE;@<Ec
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 93 34 91 22 01 87 0b 9d 0e 31 94 52 6c 39 aa d0 87 22 d3 72 9e 98 ca 02 e2 ce 22 47 42 ad ae 37 52 60 43 cf d9 e5 b6 a7 93 9d 92 8c 71 2b 05 d6 80 c1 87 3e 7d 41 24 e3 40 81 0d 29 33 27 8e ab 74 f4 c1 d7 1c a0 e2 61 6a 51 d3 71 a7 55 6b b9 b1 59 92 ce 8e 4e 3a 95 70 38 5d 2d 77 55 bf 23 88 81 d4 a4 ab 48 34 e3 24 38 d0 d8 19 93 43 5d ca 3a 61 28 0b 8b 09 d9 af 9b ac e0 04 33 f6 79 9c bd 1c d9 44 c9 c0 c9 a9 d7 2c 67 52 fc 89 c1 c1 29 cd 56 91 12 19 a6 98 20 cc 43 9a 1a 6d d3 d3 07 04 08 6e 1a d9 fa 89 82 21 15 4b f9 39 1a fc f0 4a 02 13 53 b5 c7 15 b9 19 c1 c1 29 1c 2f 43 48 4d b0 98 05 c1 c9 4f 5e cb 35 ef 40 ea 44 a4 83 56 8e 9b 38 c1 2a 2b cf 3c 72 a2 9d fc d8 2c c0 f1 b8 d4 ec 43 6c 33 c9 05 98 98 09 5b 6a 9e 83 02 04 0c e3 4a ee 75 8a b6 56 b3 1d ca Data Ascii: 4"1Rl9"r"GB7R`Cq+>}A$@)3'tajQqUkYN:p8]-wU#H4$8C]:a(3yD,gR)V Cmn!K9JS)/CHMO^5@DV8*+<r,Cl3[jJuV
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 10 b1 69 ed 86 6d 42 e6 95 3b 5f 87 b8 be 32 05 7e 50 1b 63 2d 92 6b 24 53 bf 83 bd ac 97 52 66 e7 47 f7 4f c5 db 96 7a e7 53 3b 2e f2 98 36 22 4a 38 ce 98 ef ea da dd f9 ab 55 df 85 7a 17 c7 a5 8e 27 c4 12 b9 ae b8 e1 b2 26 16 bb 89 e9 76 e4 71 95 3f c5 c3 2c c6 1c 0f 7c 2f 92 d3 7b 6a 5a b4 e2 a6 93 45 ed 8b 52 fe 4a d2 29 04 d3 92 89 ef 04 9b 25 8a 46 3d 96 dd fd 4b af 3d 13 7c 33 f8 f9 8c 7a 67 f7 bc 0f de 95 ff 00 6d fc 92 42 6c c8 3f 0e b4 fe 7f f1 df d0 18 07 e2 99 f2 e6 3e 23 bc ee eb c0 e8 90 65 9b 76 bd db 1c b3 f9 b2 b0 33 a4 e0 eb 7a f3 b3 aa b8 66 29 9d cc fe 15 c1 c7 09 a1 a5 bb 18 9d c2 33 98 fd 92 e0 d4 5b 23 93 9f b0 73 41 4d c9 70 0e 29 ed c0 d1 bb eb 3a cb 89 d4 e3 91 a5 a3 ff 00 94 fd a2 72 e6 95 dd dc 60 ef 0f b0 e7 6d 6d 0a e6 c3 e3 Data Ascii: imB;_2~Pc-k$SRfGOzS;.6"J8Uz'&vq?,\|/{jZERJ)%F=K=\|3zgmBl?>#ev3zf)3[#sAMp):r`mm
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 91 90 04 f0 a2 a6 b7 4f 43 d8 24 1a 4a fa 38 93 f0 91 80 bc 86 26 61 23 21 79 0d 68 f4 e5 19 ec 54 90 b0 9d 82 18 56 92 9b 83 88 72 9f 18 6f 09 d1 31 c6 ca 6e 12 22 10 85 b1 9d b2 74 6c 79 b7 21 13 19 ed 4c 16 55 52 96 36 13 c2 f2 1a 54 f0 79 62 c2 8d fa 0a 32 6b 70 a4 c3 7d 32 71 94 7c 27 70 8f 2a 34 ee 54 7c a9 a7 11 a9 31 a4 f0 9b 88 70 e5 43 89 5a 83 8e c8 b3 64 45 20 76 51 f3 94 9c a0 53 bd 62 91 81 c1 47 1e 9d d4 7d 07 84 e7 12 a9 07 10 8b 89 41 84 a6 37 4a 7b 2d 51 0a 4f 54 85 0d 91 68 21 3e da b0 b2 5f a4 26 38 a7 36 d1 14 ea 52 c5 2b dc 34 9d 93 01 03 74 f6 5a 2d 21 35 d4 8e e8 0b 5e d5 7d 1a 42 d2 16 90 a8 74 52 9f f2 96 b5 53 b8 f8 5e 65 ec 9e bc 2d 96 e7 15 59 06 fa cb 91 a1 99 5a 42 73 55 d2 d4 4a 1f 73 15 62 52 85 86 ee 83 35 0b 4e d9 78 6d Data Ascii: OC$J8&a#!yhTVro1n"tly!LUR6Tyb2kp}2q\|'p*4T\|1pCZdE vQSbG}A7J{-QOTh!>_&86R+4tZ-!5^}BtRS^e-YZBsUJsbR5Nxm
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: f7 4d b0 9b 67 64 f8 1e 5b b0 51 e1 a5 d5 b8 5e 4b 90 84 a1 12 a6 b1 5f d8 b6 85 8a 98 34 53 0e eb 5f ca 3b 0b 44 d9 b3 94 67 d6 32 8a 83 6d 4d 26 b7 5f 0a f2 d8 a6 82 13 31 0d e0 e6 e7 86 f2 9f 8c 03 da 9f 33 df ca 82 dc da 2a d5 e5 61 19 98 d4 ec 79 be 13 f1 0f 77 74 64 46 ed 35 a5 c6 82 c4 e1 9d 1c 25 d9 e1 d8 e9 24 01 a9 d0 30 a6 45 a5 4f 81 27 78 d3 70 52 3b 9d 93 b0 2f fd a6 61 5f ab 70 be 99 94 99 03 18 6d 17 7c 22 f2 af e1 0c 2f 77 a1 18 02 9a 13 62 ac 82 75 f6 46 d3 a1 7b c5 27 30 83 ba ab e1 3a 27 37 dc 13 5a 5d c2 c3 e0 dd 7a 9c 8b 76 4e c0 46 57 f8 e8 d4 50 32 2f 6f 41 45 c0 72 8c cd ed ba 32 bc ff 00 48 bd 6e e4 19 5c af d2 d2 3a ed 10 0f 28 34 0e 17 28 35 a3 80 af 2b c8 67 26 22 36 77 47 11 23 fd bb 2a 03 77 6e 8b ce 40 7c a1 95 e5 6a d5 fd Data Ascii: Mgd[Q^K_4S_;Dg2mM&_13aywtdF5%$0EO'xpR;/a_pm\|"/wbuF{'0:'7Z]zvNFWP2/oAEr2Hn\:(4(5+g&"6wG#wn@\|j
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 84 07 ad 03 49 be de a9 09 b5 ba af b5 48 21 b2 90 20 a4 ee 11 ea bc 87 1d 4f e5 52 a5 59 bd 05 2f 6c a3 ca 68 d5 d6 46 ea 95 2a 54 b4 a7 f2 82 97 8e d9 41 b6 e4 05 75 ec bd 2a da b5 05 ad 6a 45 05 2f 1d ba b5 a7 4e 77 d0 7a e9 05 27 1d 56 ad 00 5c 68 2f 21 c9 b8 71 f2 b6 19 b8 a0 77 e8 77 1d 99 78 ec 03 5b a8 e6 bd 8f 4b b9 5f 28 66 ee 3b 32 f1 da 64 a4 72 81 bc e9 52 19 95 a5 69 54 a9 52 a5 4a 93 f8 55 d6 1a b4 20 d4 cf ac 99 b8 dd 3f 26 66 ee 16 fd 00 6f 93 79 c8 aa 54 a9 56 61 03 9b 79 c9 a6 93 8d e4 de 7a 29 56 61 6a 43 b4 0a 05 04 3a 5a 8e 55 91 e9 1c a3 d3 6a fa 5a e4 0a b5 63 36 a7 65 6a d6 cb 65 b2 b5 61 07 04 5e 16 a5 a9 5a 92 4d 2a 29 4b fe 3b 1b a6 37 ef a4 f1 93 90 55 95 d2 24 2a e8 0c 28 34 04 ed 8e dd 14 b4 95 a1 00 02 b5 a9 12 98 fb 35 9b Data Ascii: IH! ORY/lhFTAujE/Nwz'V\h/!qwwx[K_(f;2drRiTRJU ?&foyTVayz)VajC:ZUjZc6ejea^ZM)K;7U$(45
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 1a b7 3b c9 58 b3 33 1e 5d 56 10 df fa bb da 37 03 c4 c5 2d 77 d3 45 8a 32 bb ea 31 8f e2 ba aa fa 90 0d 47 49 e4 ad 92 ed 98 b3 ef 1a 75 63 49 f3 dc db 9a ec b4 da 61 dd d9 36 54 70 d5 24 17 fd 91 a5 51 db 00 48 ea 55 66 81 00 3a da 30 f1 d3 2a d9 72 5d a7 b2 00 31 55 3e d3 f0 f0 51 c4 67 a9 6d 06 c6 ca 0c ee 49 54 8d 3a 93 8a 9e c9 72 a0 19 4f 37 27 bc 6c bd a7 82 69 ad 05 d1 13 cd 61 8c 94 f2 d5 90 b1 1f 1f 13 cd 5b ed a9 88 78 96 11 96 8c 3b 87 0e 8a 99 aa f2 03 6d 2a 94 ba 36 8b 81 a7 9a 75 47 cc ba e8 ad a5 03 71 7d 62 77 3d 0e 5a 29 9e 05 7d 34 79 6a 5f 73 0a 06 e4 f4 be 8a 50 9b 8b c3 c5 38 ee 7f d0 59 e8 12 8a 3b c0 82 81 6d 6b e6 ac c9 f9 8a d9 c2 2d 16 0b 3d 53 bc 8d cd b5 ce f6 11 8c b7 c7 7b d3 5f 25 90 d7 3b bc f0 b3 de 2a 6a bc d2 6c 79 b8 Data Ascii: ;X3]V7-wE21GIucIa6Tp$QHUf:0r]1U>QgmIT:rO7'lia[x;m6uGq}bw=Z)}4yj_sP8Y;mk-=S{_%;*jly
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 45 99 5e 25 ef 5c ad 96 c7 42 dd 2c 81 d4 fa 1a 0b 5a 20 8d 02 f5 71 1d 59 f1 5f b8 56 33 aa 37 81 5c 0b 0b 5b 66 a2 bf a5 49 aa 56 ef bc 16 a6 9f 67 f5 cc 3d a5 66 a4 da 5c a3 64 0a d8 ec 8e 57 58 a4 bd c7 88 56 41 31 ff 00 20 7e a6 58 56 8f c0 65 33 27 b6 60 ad af 4a ff 00 e4 5d 9a 42 6d 75 cb c9 0a be 16 52 ee 78 96 5b 7c 13 9a fe 67 32 2b ed cc 3b 40 db 4d 97 bc a5 58 98 53 03 19 77 58 68 d8 ae 6a d6 3e 6c 5f e8 9f a8 85 c1 95 d8 ff 00 65 01 4b 55 df f7 02 3a 48 c8 bb 8f aa e5 c6 5e b7 dc 86 9e cc 34 e5 5a fb 98 89 7c 08 65 84 1e 58 c6 14 74 dc b6 2d 40 51 81 66 32 3e 2f 69 f9 4e f2 82 e2 3b e7 50 a1 53 fa 81 09 57 09 b7 a4 a8 05 ef 89 d8 cc dd ee 82 81 73 12 15 14 1f 2a 46 da 5b 4b 6c 63 a3 06 09 e8 aa 6c e0 7a 1c 4b f4 56 98 2f bc b3 0d bb a3 b0 eb Data Ascii: E^%\B,Z qY_V37\[fIVg=f\dWXVA1 ~XVe3'`J]BmuRx[\|g2+;@MXSwXhj>l_eKU:H^4Z\|eXt-@Qf2>/iN;PSWs*F[KlclzKV/
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 37 9a a2 ba b0 2c 90 a6 d2 bb a3 d5 94 3b 40 00 6d de 63 d8 75 83 76 d2 0f 90 d7 73 da 5b 1b ba 4a 9b d0 18 69 b0 df 2a 00 97 d0 cd ec 3e b5 77 d1 23 31 30 de a0 0e 33 73 8b 93 c3 36 de 58 a5 e5 e7 a4 5b ad e0 c7 8f 98 ce 40 39 75 0c 91 d9 48 fb 98 76 6c 1a 1c 5c b0 51 37 0a 31 dd 57 2b a9 d6 75 92 b6 3e f4 60 a2 b7 16 07 99 80 33 30 fb 1d 23 de b1 d6 5c 18 c3 bc ba 03 77 88 ba 0a ac c8 f6 02 d9 f2 65 46 e6 2b 77 f8 11 53 21 2c 6f d3 d8 e6 05 77 36 b5 bf 78 e7 71 f3 0a 82 59 18 89 c0 4b b8 99 a0 a6 0f 27 92 5b 6c 85 09 9b f6 da 6e 58 e0 a8 3e 2e 67 59 32 a0 86 60 86 9d d7 7d b8 5d bd 62 a7 e2 3e 79 f8 9e c6 f3 25 9d 26 9f 10 ca d5 1d 08 01 55 77 94 3c cf 28 46 eb 12 9b 8a 44 36 cf 1e 3b c1 8b 2b 8b 4f 9a 99 7e 18 db ff 00 90 b5 1b 86 43 cd 4c 02 1d 0a ff Data Ascii: 7,;@mcuvs[Ji*>w#103s6X[@9uHvl\Q71W+u>`30#\weF+wS!,ow6xqYK'[lnX>.gY2`}]b>y%&Uw<(FD6;+O~CL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49878	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	387	OUT	GET /movies/12328652996-poster-Carnage-for-Christmas.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:03 UTC	915	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: image/jpeg Content-Length: 25978 Connection: close Last-Modified: Mon, 16 Dec 2024 04:36:24 GMT ETag: "657a-6295bb9215d50" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BjafPpElH0fUwfK05cZ7411VMqIw%2B3bE4x3J6U3x2KfFIea5cfHbRAxVLvErQLsGdZMnvV%2FOFklbHTxB9jeWaJPcfscoce9gOs321J83vwQdKlh9goSZkWKBV1FUQM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c89484042d1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1650&min_rtt=1596&rtt_var=637&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=965&delivery_rate=1829573&cwnd=194&unsent_bytes=0&cid=2ed5a396f15f82bd&ts=447&x=0"
2024-12-17 10:52:03 UTC	454	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 05 04 03 05 05 04 05 06 06 05 06 08 0e 09 08 07 07 08 11 0c 0d 0a 0e 14 11 15 14 13 11 13 13 16 18 1f 1b 16 17 1e 17 13 13 1b 25 1c 1e 20 21 23 23 23 15 1a 26 29 26 22 29 1f 22 23 22 ff db 00 43 01 06 06 06 08 07 08 10 09 09 10 22 16 13 16 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 ff c2 00 11 08 01 4a 00 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 80 01 40 40 14 Data Ascii: JFIFC% !###&)&")"#"C"""""""""""""""""""""""""""""""""""""""""""""""""""J@@
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 18 fb dc 4d 5f db cb 81 1c fe a9 6b 7b 3c db e6 68 8c cd 76 76 29 1e d9 f4 d2 5d 70 b6 8a e6 34 d5 a9 b0 00 00 04 fa 67 63 9e 4c 6b d7 1e 32 ee 29 2e 6f 33 1e 5a 3d ba ee 22 6b eb d5 22 3c dd 35 af 73 a6 be 7f 9d 22 4a 2d ad 2e 2b 22 99 da 5a f5 28 7a 94 ac d3 58 b6 bf 32 44 80 48 ad 6f 72 c5 b4 16 f5 60 4f 3c 4b e3 a8 cf 2a a8 87 e2 bc 26 b3 5e 85 8a d8 d3 1e 53 cc cb 73 32 4f 40 b5 e4 44 79 64 42 a2 25 b4 94 8e d3 55 6b 72 28 f4 56 4d 6b 6b 1b 55 4c 48 cb d6 8d a7 03 f1 c7 75 5c ab 8b 8b 5b 39 36 81 7d 3b 45 d5 29 d5 73 9b 3b bf 18 e7 2d 7f 51 b5 b4 13 6f 14 ac 5a 45 6e ef 74 88 c2 45 62 da ed cc f4 4d a6 6e 46 ba 0c e6 92 ed 84 e3 87 99 9f 9f 45 cc 72 e7 34 5a d3 2a fb 5f 84 bd 33 3a b9 db cd f3 f5 a4 ca 67 5b a6 b1 af ab ed ab e7 37 95 fa 72 6d 24 f9 Data Ascii: M_k{<hvv)]p4gcLk2).o3Z="k"<5s"J-.+"Z(zX2DHor`O<K&^Ss2O@DydB%Ukr(VMkkULHu\[96};E)s;-QoZEntEbMnFEr4Z_3:g[7rm$
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: c0 76 22 4d 73 89 6b b5 36 41 40 04 14 41 40 41 40 e9 08 91 0a 39 1a f2 68 f8 be 96 bb a7 e3 fb cf df a9 e8 f2 79 9a a0 b1 09 32 82 80 00 00 00 00 80 02 80 00 ed 75 ed 6b ce 4f a0 cd f6 fc c5 96 3e 9c 1d 7c f4 47 13 54 14 40 14 41 40 40 14 04 14 40 00 14 58 99 54 e9 93 4e b9 14 e8 a3 ea f0 ad b9 fd 78 9a 71 b7 6c 9a 9c f9 9a 80 20 a0 20 a0 00 00 02 00 a0 03 f5 dd ea eb d4 5d c8 d2 b3 6f 32 cb 1f 4d 48 97 e3 6a d9 f1 34 41 40 00 00 00 40 00 00 00 02 5d 3a 91 5e e2 ee d7 7a dd bc db 0c 7d 07 eb bc 0d 7c f4 9a b1 6c 80 00 00 00 00 00 00 00 00 2c 32 ef 8f 7e 77 e9 b7 71 a5 6e de 74 8a 6f 6d 87 b1 53 d1 e3 a8 c5 b1 e5 00 00 00 00 00 00 00 00 00 00 a7 51 6e 26 aa 68 38 fe 8a b7 a3 cb e1 46 ad 93 16 c4 00 00 00 00 00 00 00 00 00 00 00 2d b0 f5 61 e9 c9 1a fc a0 Data Ascii: v"Msk6A@A@A@9hy2ukO>\|GT@A@@@XTNxql ]o2MHj4A@@]:^z}\|l,2~wqntomSQn&h8F-a
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 6d a0 db d9 2f 41 66 bc a3 55 71 a2 fa ad 6f 79 f2 cf 18 8c 9e 3e 76 fb 2d ed f4 0d 7b 42 db 41 e9 ae 66 86 e6 63 25 36 f0 f9 9c a4 6d 16 78 5d b9 e4 55 9b 2c 46 31 1b 6e ba 31 94 f0 18 6c c5 5c 9c e1 c6 03 78 63 be ae e0 96 67 6c 65 6a 54 ba fc de d1 44 26 9a ac e3 54 b4 59 1c 3e 0b 31 98 95 e6 33 ae a1 5f 56 29 be d6 d9 ca ac ff 00 a4 f1 39 4b c1 91 c6 38 9a eb 0d 16 58 e7 57 6b 4a 2a 6b cb 32 bc 42 42 cb 9d 95 f5 97 3d 55 8d 67 ae 37 15 89 a3 6b 2f 4f 31 b5 2a 3a 2c db c0 54 ca e4 b7 08 7a 3d 9f 94 a8 d7 6d 5c 45 01 c5 e0 b6 71 1d 8b 03 b8 9b 8c c9 95 8b 21 6b 7b 17 fd 47 6b 47 87 6c d6 49 5b bd b8 ec 2d 17 ad e4 31 d6 ad 67 69 4d db fb a3 24 f0 b8 9c bd 08 db 4e dc 38 3e f6 77 8a 82 bc 25 92 76 12 fa d6 1b 64 6d 53 85 fb c4 f0 45 cd 1d ba 8e ea 75 50 Data Ascii: m/AfUqoy>v-{BAfc%6mx]U,F1n1l\xcglejTD&TY>13_V)9K8XWkJk2BB=Ug7k/O1:,Tz=m\Eq!k{GkGlI[-1giM$N8>w%vdmSEuP
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 44 22 80 4d 85 f2 7c a1 7d 9d f1 b8 39 c1 1c fc 8e 48 d9 4a f6 97 92 38 f8 6e 72 c5 83 bb 20 04 ec a4 d3 ae da 8a 07 85 a9 40 d1 97 8d db 3f 33 78 53 78 68 86 1d 6e 76 ea 8b 83 9c 51 75 72 85 75 6e 96 6e 77 4e 9d ef d9 04 d9 48 d8 14 e1 69 9e 44 d3 7f 01 ce a4 14 64 fa 22 85 f0 bc c5 39 db d0 5d c2 d5 2c ce 7e ce 2a 07 b3 b1 25 ab 2e d9 30 d1 a2 89 a4 25 d1 e6 56 1e bf 75 5b a6 b6 b7 4f b5 fb a2 0d ec 9a ef 75 77 f8 4b 94 9c a6 95 8f 8f b0 79 78 0b 25 bf 99 c5 2f 44 e2 29 08 9b ca 3e 65 a0 a1 b3 69 70 8b 41 dc 2d 4e a5 a6 f9 40 80 b6 4d 52 7c aa ec 2b de 91 08 d2 e3 f0 3b 84 d5 db d5 1d fb 28 62 32 1d 82 66 0b 64 68 01 e1 65 c6 22 79 68 37 49 cd 35 af d1 1d 2e b2 98 d4 e6 13 bd a6 8d f7 e9 41 3f 84 1c 16 c5 b5 ec ac 3d 31 a1 02 3a 69 0d 5b 2e 51 0a d0 ea Data Ascii: D"M\|}9HJ8nr @?3xSxhnvQurunnwNHiDd"9],~*%.0%Vu[OuwKyx%/D)>eipA-N@MR\|+;(b2fdhe"yh7I5.A?=1:i[.Q
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 4b fe 00 7e ea 48 b4 ff 00 76 40 3f 60 bf a2 6e ee 76 a5 26 50 c6 fe db 6a d7 de 59 3f ec b0 a7 c8 73 7b a7 cc 3f f6 8e ba b6 af b5 69 d9 ed 21 09 9a ee 16 46 96 ca 1c bc 63 6c 80 7f 44 13 ae f7 e8 1c 49 a0 87 e3 73 03 93 85 05 1d b8 d2 74 2e 6e ee 0a 27 08 df 64 5a c7 ed b9 81 d1 f0 a7 7c a7 66 27 78 7c b3 39 1c 38 70 99 dd 76 e4 2c 9b d5 e6 3b 95 7b d2 32 fd 86 46 0f f1 23 74 d7 07 0b 0a 91 89 ab 2f 1c e9 d9 c3 f9 59 6f ee b5 af 27 7e 14 5a 4b fc ca 59 7b 8f 2e 4e 3b 26 36 b7 f8 58 90 89 5d db ba 27 85 f6 4c b2 69 dc 2f b4 3b 76 ed ff 00 85 e1 99 c2 23 db 7f 0b 53 4f 4f 14 95 85 a2 31 ca 77 87 bb ec e6 5f 54 c1 6f 0a 5c 66 ca eb 77 14 a7 78 c1 88 68 e1 7d f3 1d 7c aa 4c d9 9e 6f 52 73 89 e5 6a 37 ba 6f 42 2f e1 dd 70 9d 99 91 20 a7 39 11 5c 20 e2 b1 b2 Data Ascii: K~Hv@?`nv&PjY?s{?i!FclDIst.n'dZ\|f'x\|98pv,;{2F#t/Yo'~ZKY{.N;&6X]'Li/;v#SOO1w_To\fwxh}\|LoRsj7oB/p 9\
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: a4 45 7a 92 c9 fc 76 2d 38 ad ad f9 16 d5 f6 46 09 15 fa 39 32 51 be 88 e8 af 24 f1 12 19 9a 1c 93 c1 e9 b7 d1 ff 00 1d 67 d9 56 57 e1 be 8d 35 fe 41 e9 23 4d 54 9f e4 b6 69 ff 00 7d 96 35 1f e4 31 db 46 92 f9 6d 3f ef f8 f2 74 5e da 6b e4 f6 d5 ed 09 fe 33 6a e8 aa db 47 a6 f6 d6 fe a4 72 bf 1a 7a 7c b2 88 c6 89 2a 34 3f a6 d3 57 1a 34 5e cf f1 d2 ad d2 e3 a9 45 8c 8f 5f 93 ab 1c a6 88 46 bb ff 00 a8 ff c4 00 40 10 00 01 04 00 04 04 03 05 05 05 07 04 03 00 00 00 01 00 02 03 11 04 12 21 31 13 22 41 51 32 61 71 05 10 23 42 81 14 20 52 91 b1 30 33 40 a1 c1 15 43 62 d1 e1 f0 f1 24 50 72 a2 54 70 d2 ff da 00 08 01 01 00 06 3f 02 ff 00 e9 71 68 70 b7 1b da dc 11 e4 8c 83 1d 86 8a 50 6b 85 29 a4 63 9d 8e 8d e3 70 e1 b7 f0 74 ac 97 38 84 6c fa 05 a3 40 a5 08 c3 Data Ascii: Ezv-8F92Q$gVW5A#MTi}51Fm?t^k3jGrz\|*4?W4^E_F@!1"AQ2aq#B R03@Cb$PrTp?qhpPk)cpt8l@
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 0e 03 00 a2 d2 ec da a7 c6 58 d2 e7 3a f8 87 a7 92 1c 58 c5 f7 0b 91 de 3d 96 46 44 ca cd 64 91 a9 1e a8 98 a3 7f 1a bc 27 64 e9 a4 96 cb ce 62 87 09 a8 f1 1d aa 39 01 77 a2 ca f6 96 bb b1 4f 9a 5c 3f 0e 26 0b 2e 7b 80 52 32 09 23 69 60 b3 9d 1c 4c 98 86 be 88 19 5a d4 ec 46 22 47 47 00 34 32 ee 55 4d 89 0f 23 bc b7 fa 2f 66 c7 ec e8 60 93 0f 23 5d 9f af eb e8 9b 0f d9 2e 42 dc df 0d a0 05 c0 10 3e 23 9c 1d ef 45 19 af 0e 9e ab 2b 47 5e 9d 91 cb 44 1f 95 6a 73 15 98 78 02 fe 8b 36 51 5d d7 d9 df 27 c2 07 36 57 77 55 a7 d1 4e 1b 88 e0 59 f8 42 51 e2 f5 21 3c 68 ec 8e ac cd 75 82 b8 78 76 f1 64 77 46 f4 f5 5f bb 63 3a 0c cf 0a 36 e2 44 2e 2f ba 0d 3d 14 58 93 36 5c fd 1a cd be ab 83 ac 8c c8 1f 6f 3a 94 31 18 a8 69 a4 d5 b8 b9 c9 e7 09 87 88 c6 0e 53 71 52 Data Ascii: X:X=FDd'db9wO\?&.{R2#i`LZF"GG42UM#/f`#].B>#E+G^Djsx6Q]'6WwUNYBQ!<huxvdwF_c:6D./=X6\o:1iSqR
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 36 46 4b 3b 88 b3 4b 04 1d c0 c9 3e 8e 66 b9 af 2d e8 b0 cd ed 17 f5 41 fd dc f7 7f bf c9 45 10 de 57 80 bd 92 c9 05 c5 1c 9c 47 0f 21 4b 07 07 b3 5a d9 67 97 12 d7 b9 e1 9b 6b 67 55 ec b0 47 c2 6c 84 c8 7b 0d 0a 81 98 1c 43 9a 1a c2 5c 62 7f ea 9b 84 c6 63 07 19 f0 e5 76 85 db ac c6 1e 33 b6 cd c0 ff 00 34 59 80 c2 bd a6 b9 4b e8 01 f4 5c 36 82 e7 93 42 ba a7 45 3b 1c c7 b7 76 95 14 01 ed 63 62 24 81 96 b7 f3 5f 10 1f a2 21 ad 07 e8 87 ff 00 27 da 1f fa c4 3f cd 35 f1 bd ec 91 86 da e0 b0 dc 4d 5d 24 ed 24 f7 d5 7b 34 b3 c4 d7 97 8b ee 29 32 f0 cc a6 7e f0 33 5c cd 1a 91 e8 b1 58 a8 60 e1 0b 6b 2c ee ea ef f9 a7 4d 03 88 90 cf 6d 23 d5 61 61 6e f2 e2 00 fd 53 25 7c 4e 78 27 28 0d 58 ce 25 66 e3 17 d7 fe 5f ec ac 68 9d cd 8d ae 9c e4 cc 6b 97 a2 73 3d ab Data Ascii: 6FK;K>f-AEWG!KZgkgUGl{C\bcv34YK\6BE;vcb$_!'?5M]$${4)2~3\X`k,Mm#aanS%\|Nx'(X%f_hks=
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 89 67 3c c2 f6 ea b4 5c cd 23 dc d3 e6 8b 41 f9 54 71 3e 4e 0c 6e 3f bd 77 4f 34 e8 23 90 ca c0 ed 32 ec ef 35 0e 21 d9 32 4c 48 68 cd 67 f2 43 0f 09 6c 4c 6e 83 20 d5 3a 49 1c e7 3d db 97 7d fb 0a 38 a7 70 0c 67 84 34 50 0a da 41 5d 40 28 68 08 6f 74 0b 36 3d 95 33 4f 35 fd 4a e2 3b 99 c1 73 1e 63 a9 59 93 07 c8 5b aa d3 df e2 60 f5 52 cd c4 60 e0 37 98 1e ba f4 50 38 ce 78 a5 dc cc ad 9b ea 86 27 0e 72 bd a7 94 d6 cb 31 37 7b 95 94 78 47 ec 8b 49 d4 ec 55 3a b2 aa 35 47 fc 2b 23 f6 3e f0 df 9a f6 45 e7 c5 ba ae 86 97 36 d5 49 b9 76 1a 2f 09 5e 22 b5 d5 03 10 db 75 88 6c f1 bd f3 11 f0 88 77 80 f9 a8 22 c2 c0 21 82 06 d0 1d 7c f5 5a 7e cf 44 d1 77 6b 9c fe 68 d3 be a5 73 aa 66 88 5a 7f a2 0e 2d be c1 00 ed 13 47 73 ef a0 85 13 a7 64 4f ed b5 db ee 52 d1 Data Ascii: g<\#ATq>Nn?wO4#25!2LHhgClLn :I=}8pg4PA]@(hot6=3O5J;scY[`R`7P8x'r17{xGIU:5G+#>E6Iv/^"ulw"!\|Z~DwkhsfZ-GsdOR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49879	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	1386	OUT	GET /images/btn-overlay.png HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/css/main.css?v=4.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:52:03 UTC	905	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: image/png Content-Length: 18928 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:14 GMT ETag: "49f0-59c3157356180" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5508 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kjg%2FpgTVKxO%2BSjgHLQYUeYGXjUo4VnjtA9Z9TIE0RyLdUl0wDpQ6LA0%2BJ%2Fg%2BHG5dJzUYQNwx5wmsoa4JnIvqNySYSNSX0rGzR4E%2F%2Bin%2BBnYHpTGIu1qWFUEwJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c895cca41c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1706&rtt_var=674&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1964&delivery_rate=1583514&cwnd=210&unsent_bytes=0&cid=c15dcb2b348adceb&ts=450&x=0"
2024-12-17 10:52:03 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 1f 08 02 00 00 00 4f ae 39 34 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 1d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 8d 95 5d 6c 14 55 18 86 9f dd 39 33 6b 02 ce 55 05 2d 49 99 a0 02 21 a5 59 c0 28 0d 01 dd ed 2e db c2 da 6e b6 2d d2 c6 44 b7 d3 b3 bb 63 a7 b3 e3 99 d9 f2 13 ae 88 89 c6 1b 50 ef 0c 89 f1 ef 8e c4 c4 44 03 fe 44 f0 42 6e 30 98 10 14 b0 31 d1 70 01 f1 27 24 24 dc 28 d4 8b d9 ee 0e d8 06 cf d5 37 ef f9 be f7 fd be f7 9c 99 81 d4 e5 8a ef bb 49 0b 66 bd 50 95 0b 59 6b ff c4 a4 95 ba 42 92 c7 58 41 37 2b 2a 76 e0 67 4a a5 22 40 c5 f7 5d ee 5d 09 b8 fd 23 09 80 8b 9b 97 d8 7f d0 5a 31 2d 03 1b 12 0f 01 Data Ascii: PNGIHDRO94pHYsiCCPPhotoshop ICC profilex]lU93kU-I!Y(.n-DcPDDBn01p'$$(7IfPYkBXA7+*vgJ"@]]#Z1-
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 7b cb 11 a7 f6 79 30 37 9a 5f e4 3c 5c 1f 18 6e e1 e7 5f a9 ec 29 01 dd a0 fd 26 dd 42 39 d2 d2 fe f1 c3 52 ab 07 d1 e3 b9 c3 c5 48 4b e4 64 90 1f 5d c4 c3 fa d8 60 a4 2b dc 50 8d b5 6a c5 f1 aa b3 7b a8 95 ff 69 5d 0d 96 5b f1 55 df 2d 15 a3 de f4 a4 6a 96 c7 a3 7c bd af a2 f2 85 88 53 2f 49 6f bc c5 af cf b1 2f 51 41 d2 60 0a 89 8d c7 1d 2c ca 14 c8 62 e1 a3 68 50 c5 c1 a5 80 c4 43 a2 90 b8 ed 9c cd 4c 21 09 98 41 e1 30 87 c4 25 40 52 42 a2 5a 95 1d be 1a 12 8f eb 28 1c 6c 06 7a 3e a6 89 45 9d 3f f0 a8 c7 f2 06 a8 d3 c4 a3 b6 0c 4f d4 cb 8d 16 4f 43 ac 16 69 b1 4d a4 c5 0e 51 14 3b c5 76 d1 8f 25 9e 15 cf 89 5d 22 27 d2 a2 5f ec 68 d7 96 62 13 59 d4 b8 d1 e6 79 95 26 12 8b 32 fb c8 72 16 97 90 0a 2e bf e2 d1 20 58 da 95 e3 dd cd 8d 9d 9d a3 ea 25 c7 be Data Ascii: {y07_<\n_)&B9RHKd]`+Pj{i][U-j\|S/Io/QA`,bhPCL!A0%@RBZ(lz>E?OOCiMQ;v%]"'_hbYy&2r. X%
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 37 2d 30 32 2d 31 36 54 32 31 3a 30 36 3a 30 39 2b 30 38 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 37 2d 30 32 2d 31 36 54 32 31 3a 30 36 3a 30 39 2b 30 38 3a 30 30 3c 2f 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 31 37 2d 30 32 Data Ascii: "> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2017-02-16T21:06:09+08:00</xmp:CreateDate> <xmp:MetadataDate>2017-02-16T21:06:09+08:00</xmp:MetadataDate> <xmp:ModifyDate>2017-02
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 64 63 3a 66 6f 72 6d 61 74 3e 69 6d 61 67 65 2f 70 6e 67 3c 2f 64 63 3a 66 6f 72 6d 61 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e Data Ascii: (Macintosh)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:History> <dc:format>image/png</dc:format> <photoshop:ColorMode>3</photoshop:ColorMode>
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 Data Ascii:
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49881	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	379	OUT	GET /movies/12311450972-poster-Tokyo-Shaking.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:03 UTC	914	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: image/jpeg Content-Length: 11104 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:40 GMT ETag: "2b60-6295bc85b9c46" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fybQQ7L618V9G8ehMCJ2iU4Qq79pRnHudD%2FEOgMnkcI%2BdWGKJi8l19M7I7sp1EQbfAMPWjuDcT50cV2%2Bi0gYEv%2Bi37zrhwJoY4oQofiavUSCvrP3qrsjTMRfx3jn4WY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c8a0cd14350-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1540&min_rtt=1525&rtt_var=602&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=957&delivery_rate=1773997&cwnd=206&unsent_bytes=0&cid=e18cb6f77e13ea08&ts=446&x=0"
2024-12-17 10:52:03 UTC	455	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 00 01 02 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 de f9 c4 66 dd 53 4b 91 7e 6f 97 4e f5 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqwJ"5fSK~oN
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: f5 66 5d db 38 be 3c a4 ee fb dd 64 f8 db 8d c8 df 93 ea be 79 a8 a2 de 4a 08 c5 57 9f f4 dd 5f 25 b9 d1 ee be 9c 52 66 f4 fe 5f 0b 84 51 75 50 ce 4e 54 39 6e cb b7 d1 2d 8a 35 76 22 0c e5 d8 57 e0 ab 3b 33 08 ac 22 8a 95 a0 66 da 81 02 47 af f3 b2 83 0d cb f4 83 7c 44 7d 46 18 72 12 a5 cc 4e bc 28 5e c4 95 4a a7 b8 d3 2a a4 35 1b a7 e0 6c 7a 9f cb bb a6 2f 25 50 93 bc 77 a4 1c 16 49 53 d8 4e 06 23 92 fa 55 69 c2 cb 2d 68 98 1c e3 da 25 0a dc 75 6c 3e f7 bb a8 7b de f4 9e 1c 44 7e 65 42 02 a0 f3 7a 15 ab 45 42 56 7d 85 96 ad 36 ad ad df 82 58 b5 6e a7 cf 7e 73 d1 22 3c 1d e3 36 da b5 cf 92 ea 0a 75 b5 8a 46 c3 51 7a 6e f6 f5 3e 59 32 57 36 80 ed e2 d3 a1 e5 fa a9 42 57 bc ef 69 1f 7b de b9 e1 a4 83 66 57 62 91 4f 3d cc fb 50 ca a2 67 d6 69 38 5d a1 9c f4 Data Ascii: f]8<dyJW_%Rf_QuPNT9n-5v"W;3"fG\|D}FrN(^J*5lz/%PwISN#Ui-h%ul>{D~eBzEBV}6Xn~s"<6uFQzn>Y2W6BWi{fWbO=Pgi8]
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 81 b5 fb fa 76 f1 3e 40 07 3a fa 9c 3f 52 d8 1d 7a f3 18 ef f2 1f 3c c6 07 19 e7 85 b0 3e 79 67 98 ea 49 bc 56 fe c0 05 79 1e 76 31 22 47 66 ab 48 f1 d7 f2 92 08 d9 1b 49 b5 74 09 20 61 de 77 87 08 c2 b9 d6 75 8c 01 0c 7e 7e 3c 7a eb e8 7b c5 39 f1 9d f5 9d e7 90 c9 e7 08 36 57 04 70 17 32 34 71 7b 68 d1 81 89 54 33 c3 45 72 4a 3d 3c 31 32 26 a6 cf b9 17 d4 e1 cf fd cf 2c 2e 09 42 00 63 9f fb de 7c 11 fa 16 3d e0 c7 60 32 f5 9f 1c bd 3f 9e 56 9b a9 21 70 ee 9e 21 d5 81 c0 ea 85 4a b9 10 8f 63 5e e6 19 94 f6 33 ac 38 70 fd 19 80 c1 1a b3 00 a0 37 47 08 39 f2 4f e9 9d f7 84 74 0f 79 3b 74 b7 ed 95 92 69 5a 42 f5 9a 38 f5 c2 42 8a 96 09 af 59 98 cb 45 c2 ac de 38 d6 7f 2d 47 06 68 d8 34 7f 53 87 e9 e2 1b 3a 21 f9 f4 d6 06 fc 7a 7b b4 c3 e9 e6 d3 37 ba 9b da Data Ascii: v>@:?Rz<>ygIVyv1"GfHIt awu~~<z{96Wp24q{hT3ErJ=<12&,.Bc\|=`2?V!p!Jc^38p7G9Oty;tiZB8BYE8-Gh4S:!z{7
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 49 a6 af c0 39 56 83 77 ae e7 10 87 37 ad 28 af 59 8c 91 d7 60 a1 a4 1e 05 81 2d 8d 87 3a c1 de 09 18 67 13 d8 c9 5f 69 f7 4d 8d 70 ae 7f 51 f9 17 f0 de 07 26 65 91 e4 97 c6 58 a7 42 79 66 b7 6f 63 75 0e ff 00 9f a2 5a e6 1c c6 a0 bf b5 dd 6e ed f2 cf 4f b5 fc aa d9 a5 54 51 5f 49 35 35 76 7c fe dc b4 d2 dd e4 92 2a 1d b4 68 9d 2b 03 d0 f1 18 5d 71 ba 38 c3 eb fa e6 91 bc 6e 03 de 49 f2 00 f9 03 02 fc f8 01 93 ce be f4 6e 85 ab 88 d8 45 18 ce 51 42 dd a7 a3 c7 76 82 c6 7a a5 cb b9 1e 8f 7f 55 9a 48 3d 41 d4 db be 65 e2 b7 d2 2d 7e b5 e3 85 a0 65 5f 67 c9 24 8b b2 60 cf 16 18 7b c3 e5 85 5f 07 b9 9a 9f 21 61 53 b5 68 bb 02 b9 ed 60 39 ed 15 3d 48 d9 63 55 09 64 d6 57 f1 7a 6a 04 49 27 52 6d 75 d1 62 6f b5 5e 79 eb 5f fd a2 a1 ff 00 1b 90 ed e9 eb 8e eb 97 Data Ascii: I9Vw7(Y`-:g_iMpQ&eXByfocuZnOTQ_I55v\|*h+]q8nInEQBvzUH=Ae-~e_g$`{_!aSh`9=HcUdWzjI'Rmubo^y_
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 5b cc f0 59 b4 b2 58 35 8c b1 0a 15 be da 29 22 10 4f b7 af f6 34 2f 38 79 5c 4d 52 4f 86 66 01 66 99 5a b5 62 1a 27 f1 19 60 42 59 a3 43 9c 08 24 50 21 76 c9 66 75 85 4d 87 9f 66 b2 c7 aa 8a a5 89 22 f6 58 b1 a6 32 6a ce 4a d7 95 a4 ab 13 47 6b 57 48 da bb 1d 43 5e d4 94 e1 7a cf 0c b0 b5 49 e4 51 3d f0 02 cf 59 44 d7 2a 34 70 5f 82 26 97 7b e2 8d ba c4 b7 35 83 04 56 c9 af 56 65 82 c5 42 60 3a c4 f2 8e 85 71 9a 30 6a d3 83 61 14 6c db 18 84 75 ef b4 83 77 b4 5b 51 53 50 b5 97 8d 76 8d 4e d0 c9 ac 4a a0 49 36 47 33 1c d3 57 f6 ac 38 5f 03 7e 08 c6 c6 4f f2 b6 56 24 58 99 d9 b1 89 ce fb c0 73 b2 ca b1 bb 65 38 3c 16 1e c1 85 df c6 c3 79 22 87 31 89 02 8a 36 e1 58 e3 da bd 60 39 64 ca d4 b9 35 b9 92 c9 fc d4 cb 7d b5 19 6c 34 f3 21 0f 63 5b 7e 16 5f 71 16 Data Ascii: [YX5)"O4/8y\MROffZb'`BYC$P!vfuMf"X2jJGkWHC^zIQ=YD*4p_&{5VVeB`:q0jaluw[QSPvNJI6G3W8_~OV$Xse8<y"16X`9d5}l4!c[~_q
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 8b 50 32 9f 22 be b3 45 5f 0e 23 81 9f 21 34 3a da bf 95 a6 84 23 3f 13 10 6a fb 2a d2 de 5e c3 88 1d 3b 22 d0 c3 a1 09 5c d2 53 5d 06 9d 3d 76 ab 60 9c b3 34 d1 f6 8f 66 dd 4f 7a 9a 71 4b d7 69 d9 12 b4 ed 54 0a a0 01 fc 75 52 ad 4f 6e eb e8 e8 a8 f6 9b 43 b8 41 e0 aa 93 45 b4 70 95 38 1f 80 02 1b 54 8d ca d9 26 6a 6d a4 60 58 05 9f 31 d4 4a dc fd ab 2c e3 e0 b1 f7 7d a0 c4 03 f8 89 b5 f8 20 c0 3d 2f 6d 8e 15 14 16 63 ee 12 dd 63 82 10 b0 08 be 48 9c 81 f3 33 50 8a 79 cf d6 68 d5 bc b2 0f b9 84 19 eb ea b4 04 78 10 23 19 d9 f4 b1 21 6d 4a 50 e3 a8 0c e4 4d 1d 9a 7b ae 73 6b b0 3b c8 8d ad ed 3b 5f 4f 49 5c d6 a3 01 88 fd a3 99 5d 3d 99 6d d6 d6 96 00 d6 d8 46 18 e7 f9 b8 03 89 4e 81 3b 32 ab c3 e9 52 ed ed 61 4e a4 c5 63 c6 54 19 46 8a be cd aa f0 fa 51 Data Ascii: P2"E_#!4:#?j*^;"\S]=v`4fOzqKiTuROnCAEp8T&jm`X1J,} =/mccH3Pyhx#!mJPM{sk;;_OI\]=mFN;2RaNcTFQ
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: 34 06 fe ce a2 bc f9 a1 ff 00 34 d3 36 ac 96 0a ea 11 14 61 46 4c d2 ea f5 3a dd 45 2f 4e 9f b9 02 b0 a4 75 2d 06 8e f4 5b ab ee 45 4c ae 01 0c a0 6d c3 09 fc 3f b3 bb 5b 5f a3 74 b7 7d 42 a2 a7 bb 9d 8f 55 96 77 8c 6b b3 73 e0 2e e2 a4 73 81 0a 8e b9 9c 43 0c 39 33 af ad 49 f2 75 f5 44 e9 13 e3 09 8e 1f c3 a7 a2 94 d3 d7 90 aa 49 f8 99 43 14 00 0b 54 9f 91 f4 69 74 dd 99 da 4f 45 2f a1 4b 0a aa af 2c 59 a5 2c e7 24 d6 84 9f 79 13 b3 7b 8a f3 b1 6d dd f3 22 33 bf 07 3d 22 e4 f3 1a 13 1b 99 9d de b2 7c 60 f8 0f 50 19 98 0e 7c 62 11 d4 75 99 53 cc e9 0a bd f5 ee 07 07 98 8a 2f af 25 80 1c fa 34 3f d5 a9 fd f7 9a 7f f7 49 fd d1 34 fd ff 00 01 d5 8a fc a3 ad 13 da 8c 00 eb 08 8c 7d 75 95 9f 35 1e a1 f4 2e 5b 99 9c f4 30 86 3e 02 5a f9 e5 51 8f d2 58 0b 92 77 Data Ascii: 446aFL:E/Nu-[ELm?[_t}BUwks.sC93IuDICTitOE/K,Y,$y{m"3="\|`P\|buS/%4?I4}u5.[0>ZQXw
2024-12-17 10:52:03 UTC	1369	IN	Data Raw: aa 52 96 ce e1 d2 2e fd 35 46 14 6d 15 7f 26 84 37 67 7d 1e 3f fd c1 f2 07 98 98 a7 4b 5a 88 8e 35 0b 5e ef d9 58 b5 d9 ac b7 6e fe 70 71 36 5a ec 41 f1 24 98 dd 71 93 88 07 bb 33 b8 37 f7 61 53 76 7a c6 63 da 2c 47 90 41 32 d6 da c7 de 65 7a 1d 31 5d ec 39 03 a2 03 12 ab 08 21 86 ce 3c 8c 64 3d 55 8a fd 0e 3d 1d 0c 46 5d 33 e1 e3 28 d3 74 b7 6c 5a 9a ac 70 63 15 43 c6 67 74 c0 80 1a 05 35 6e 23 d9 2d e5 2f d3 ec c6 d2 71 1d 0e 73 0a 9e 9b 7a cd d9 e7 19 11 ed bc 1c 60 05 f8 99 61 47 e8 71 1a c5 19 48 72 9d 78 30 84 e4 79 cd 11 27 c3 06 67 93 93 99 69 71 e5 88 54 43 cc d7 3b 8c 84 ad 47 d4 c2 2a 66 5f 9e 44 cd 7a e5 41 93 91 b3 98 bb b2 70 40 6b 09 cc ba f7 bb 7a a2 1c 7d 33 37 1e a4 92 61 38 f4 52 9b b9 ff 00 ac 36 12 32 2c fc 71 89 47 3d 4b 03 2d ad ed Data Ascii: R.5Fm&7g}?KZ5^Xnpq6ZA$q37aSvzc,GA2ez1]9!<d=U=F]3(tlZpcCgt5n#-/qsz`aGqHrx0y'giqTC;G*f_DzAp@kz}37a8R62,qG=K-
2024-12-17 10:52:03 UTC	1066	IN	Data Raw: 7a 50 f9 d0 0b 85 88 13 7d b8 58 80 1e 74 ea 45 e1 68 00 ed 98 9c 18 9e 34 2c 7e a0 a2 39 89 43 41 fd 42 a2 15 01 ee fe 26 33 51 b3 b8 ae 44 6c ce f6 a6 aa 01 ec 22 27 ef 80 50 95 36 47 2d 8d a9 97 8f b8 9c 8e 26 d3 1c b8 f1 18 70 67 b4 b7 cc 40 0b 50 8e a7 89 d9 c8 7c 2c c7 83 28 bb 89 d3 10 d6 5a 76 ff 00 30 a1 fb 80 47 0a ea 54 c0 0e 23 e6 61 6b 5f 32 84 27 15 4f d0 36 28 c0 00 60 31 d0 8a 8f 5e f0 2e 37 0b 15 c8 f2 4c 04 11 c1 86 33 50 9b d8 cc b9 99 5c 80 65 96 e5 9a 74 d6 41 95 08 52 a3 dd 0a 2d 92 1b 8a 13 da 8c 18 73 0f 22 6d 22 f9 b9 b4 d4 54 68 63 0f 74 e0 4c aa 4e 46 31 54 cc 4a 51 22 e4 53 f3 3f c4 55 46 47 de 36 91 e2 0c 7f 05 a6 36 05 07 e3 8d 09 a1 3b c2 ea a1 36 61 52 4c 10 e2 0c 6e 2e 25 06 37 88 ea db b8 11 8f 12 e8 2c 56 35 30 b1 b3 fe Data Ascii: zP}XtEh4,~9CAB&3QDl"'P6G-&pg@P\|,(Zv0GT#ak_2'O6(`1^.7L3P\etAR-s"m"ThctLNF1TJQ"S?UFG66;6aRLn.%7,V50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49884	192.243.61.227	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	562	OUT	GET /0d/78/b9/0d78b9388f817250ac191adb4fce32e8.js HTTP/1.1 Host: repetitiousfontmonopoly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gomo.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	575	IN	HTTP/1.1 403 Forbidden Server: nginx/1.21.6 Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Host: repetitiousfontmonopoly.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49883	192.243.61.227	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	562	OUT	GET /9a/61/7e/9a617ed9fe89da712ab169729ec98191.js HTTP/1.1 Host: repetitiousfontmonopoly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gomo.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	575	IN	HTTP/1.1 403 Forbidden Server: nginx/1.21.6 Date: Tue, 17 Dec 2024 10:52:03 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Host: repetitiousfontmonopoly.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49886	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	374	OUT	GET /movies/1239411900-poster-Back-Home.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	912	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:04 GMT Content-Type: image/jpeg Content-Length: 16145 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:17 GMT ETag: "3f11-6295bc6f7024b" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNKQ8D7%2Bk6CXQyESM8egQH%2BhkHIF93MHtEB8d2un6MfwGUVEbRNyVCcJh8Y5F8NOTkquoI76BnvOi7E19NKGaINy1ubi%2FhckPyByXXwgbYa5WwePMEeJUP9L2TiiUpI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c8cfad4440d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1580&min_rtt=1571&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=952&delivery_rate=1777236&cwnd=177&unsent_bytes=0&cid=b5de1f685d09a10b&ts=447&x=0"
2024-12-17 10:52:04 UTC	457	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 00 04 05 07 02 03 08 01 09 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 02 04 05 06 01 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 eb 94 95 64 a4 92 49 24 92 49 24 92 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}J"6dI$I$
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: ee 2b 3b e7 f7 40 c0 93 7d aa bb db cc ad a0 aa 66 5d e5 c7 85 23 e7 55 d9 ae a4 f0 64 b5 9b d5 4d 5e db 59 a5 6a 21 c2 9a 71 43 88 e7 f7 cf 7d c0 a2 5e 24 96 4b 1f 52 20 d5 0d b8 47 3e 28 ad 4a eb 6d b2 1f 9d 04 73 8c cf 42 0b e8 35 07 9e b7 5e ab e2 0e f2 6f 90 cd 2e 74 1b 66 e6 b4 58 6a 0c 86 ce e8 2c a7 55 dc 33 5e 4f c9 fd 4b c7 77 75 90 3e f9 e5 8d 7f ab c4 97 be 6c de ba d3 d7 8d 92 c1 24 b8 e6 52 1f 78 cc fa 27 2f 17 2d 33 8a a2 c9 c8 6d 0d 9b 90 47 fa 57 94 36 c9 fe c6 be 5a 41 bd 5f 91 d7 b5 10 93 d3 02 cf 4e df 6b d9 40 e8 3e 79 cc eb 9c a7 76 5d de 4a 15 1d b6 c7 6e e6 89 ef 79 11 26 36 98 fc b5 c9 84 97 be f7 8b dc 7d 48 82 03 76 23 2d 8b 64 53 66 99 6d 7d d3 1c c5 bf a1 f9 69 33 c1 a7 14 b7 6d 28 62 ca c2 ba e2 4d f4 74 64 90 4e b3 78 f8 46 Data Ascii: +;@}f]#UdM^Yj!qC}^$KR G>(JmsB5^o.tfXj,U3^OKwu>l$Rx'/-3mGW6ZA_Nk@>yv]Jny&6}Hv#-dSfm}i3m(bMtdNxF
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 04 03 01 01 00 00 01 02 03 00 04 05 11 12 06 13 21 14 22 31 32 41 10 20 23 51 07 15 33 42 61 30 34 40 52 24 36 43 35 71 ff da 00 08 01 01 00 01 0c 01 ff 00 84 40 2f f1 b6 ca 5b 62 d2 06 97 27 26 93 25 7d d3 a9 2f fe 09 95 d2 2e a1 16 dd 99 ed de 5a b3 eb 1f 52 ce 27 0a 91 d8 64 ed a7 b2 b7 98 cc 80 47 2c 72 8d a3 86 ff 00 8d 97 ea 7c 7e 0f 49 21 32 5c 65 73 17 d9 89 cc b7 53 93 42 8b 9e 21 69 2e 0a a0 4d f8 f5 24 f0 1f 09 85 ea 2b 8b 74 86 37 45 73 67 75 1d dc 41 d0 8f f8 bd 51 2c 56 cd 98 b3 7b 7d 5c fe 45 25 48 23 c1 b5 99 a4 d7 13 a9 7a 4b 20 d3 5b 28 91 b7 ff 00 17 2d 82 c6 e6 a3 e3 77 6f b6 cb f4 5e 4e c6 e8 c7 68 be aa 39 a2 92 09 1e 29 53 8b fe 36 af c6 68 59 5b 4d d2 ce ad 7e 7b 2e bd a1 f1 ff 00 0a 4b 88 62 60 b2 48 a9 57 9d 43 86 b1 1b 9b 21 0e Data Ascii: !"12A #Q3Ba04@R$6C5q@/[b'&%}/.ZR'dG,r\|~I!2\esSB!i.M$+t7EsguAQ,V{}\E%H#zK [(-wo^Nh9)S6hY[M~{.Kb`HWC!
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: be 73 4a b5 38 dc 64 6a ae ed 52 50 43 55 d5 bc b1 96 6a dd 1d 7e 40 0b 1d 0a b1 c0 dd 5e e8 ae 95 64 e9 3b ab 34 ee ba 2c 91 5d 63 6d 1a dd b8 a8 52 f0 c8 8c 47 13 5c a9 18 6c d4 e6 e2 d5 52 4b 78 c3 09 a5 17 10 cf 78 d2 8a 90 96 f6 7c 17 82 45 05 ca ee a4 e4 62 4d ad 41 8d 96 55 0e 57 55 63 69 6e c9 c0 a8 34 b8 e8 61 20 84 1c 32 16 f1 f6 ff 00 4d bc e3 31 17 d2 02 ed 10 4a 95 3d e3 74 35 e6 b8 d3 af b4 d3 a7 8f de a7 8c 1d fd aa ee d8 21 32 28 f6 c9 09 52 df 88 f3 58 9b 74 96 e7 94 87 db 6b 74 f7 24 f6 0f 05 c5 e5 26 86 61 04 e7 92 67 30 fd 89 e4 11 be a2 b8 81 e1 99 d3 c5 17 a5 91 b6 08 ae e4 d3 a4 3e e0 86 fe 76 96 e9 a4 0c bc 61 b6 12 00 91 b9 77 c5 e3 4d d3 cd cd b9 0b 68 44 5d eb 49 54 f2 f4 32 15 52 db 63 61 60 d1 7d 42 9a 2a 8e d9 76 1b 5e 42 b1 Data Ascii: sJ8djRPCUj~@^d;4,]cmRG\lRKxx\|EbMAUWUcin4a 2M1J=t5!2(RXtkt$&ag0>vawMhD]IT2Rca`}B*v^B
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: d9 7f 6a 16 cb fb 57 a7 5f da 9a d5 4f da bd 20 1f 15 c7 b4 e1 2a f4 3f 30 ab 1f 23 71 6b 96 94 91 3c ea 89 26 36 4d f9 ba ac 4e 26 ca 69 78 4b 23 ca 1f a6 f1 0c a5 fd 2a f2 b3 b1 f4 52 8e df d2 9f 3b ac 84 36 93 da cd ea e2 47 8e 4c 75 bc 67 f4 a4 94 54 16 b1 ef 65 9c d1 3c 06 b7 ca 9d fc fc 50 f9 ad 81 5b ff 00 34 24 54 a3 2b 39 d2 d4 4a 45 6b 40 55 ac 9c 1c 55 bd df e9 2f e7 be 8c a9 ee 0f 83 c4 c9 b3 4c ac c3 55 7f 8f 9d cf b0 69 b0 d8 fb 98 fc 99 52 91 0f 80 69 62 14 59 50 12 4e 86 53 27 eb 6e 20 b0 87 ca de 60 b1 f7 b6 f2 34 90 f1 95 6c 8a 7f f4 e5 42 0d 6c 9a 9b 8a fd a9 e4 fd ab 99 ae f8 24 85 3c 8a 45 24 9e 58 d4 71 05 a0 a4 d6 b7 43 c5 47 72 ca a0 7e 76 50 c0 82 36 32 31 fa 29 57 ee 8b 79 1c 63 44 8a 9e f5 1f 7a 71 56 99 2e d7 92 40 10 dd c7 22 Data Ascii: jW_O ?0#qk<&6MN&ixK#R;6GLugTe<P[4$T+9JEk@UU/LUiRibYPNS'n `4lBl$<E$XqCGr~vP621)WycDzqV.@"
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: bf e9 cb 6b 4b 7b c5 79 fa 77 aa b1 93 e1 a4 c6 e6 a7 02 af 23 82 1b 99 a3 b7 b8 13 43 d1 19 5c 7e 2a 7c 8b 5e dc ac 22 7b 9e 80 9e 79 a5 97 d2 34 bd 52 71 26 f5 3f 95 76 fb 16 97 17 16 f6 28 22 6d 0e 94 cd 1c 46 4e 47 b8 90 f6 32 17 53 5f 5d 5c dd 4d f5 a4 f2 db 47 1c 91 b6 8f 47 f5 2e 2a d2 1b d6 bf bb 5b 72 f7 7f c3 29 25 79 58 d8 97 ea 76 c4 b6 56 53 89 e1 e9 3a 03 2f 8e c4 de e4 9e fa e9 61 5e a0 b9 86 ef 39 96 b8 82 40 f1 74 97 5a 3e 31 3f 97 64 5c b5 9a 93 f0 2b a3 67 b5 c6 60 1e da e2 70 b3 33 f7 2f 6e de b0 19 5c 7d ae 12 6b 79 ae 42 cb d3 79 94 c7 bb 41 72 fa b7 cd 1b 06 bc 33 59 4e ae 9b d8 ae 3e 6b 8d 72 ab c9 00 8f e6 a6 fd 45 94 53 27 cd 7d 26 b7 f8 1f 21 1e 9c ee ac ce ec f5 5a 1c d8 6a a6 a9 7f a5 10 a9 0e 82 ad 1a 0d b5 a5 f9 6a 3f 86 16 Data Ascii: kK{yw#C\~\|^"{y4Rq&?v("mFNG2S_]\MGG.[r)%yXvVS:/a^9@tZ>1?d\+g`p3/n\}kyByAr3YN>krES'}&!Zjj?
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 22 21 c6 6c e5 b3 3f 08 f0 40 c0 74 e4 9f 1e f1 c4 5a d0 0d ed 38 4a a4 c6 fe 1f ed 5f 04 20 e1 1c e5 4a ac 07 70 db 82 c7 7c fc ce 58 b9 86 50 c8 ed 82 98 43 a9 28 a2 da 46 91 6c 6a 30 4e 3f 0e 8e ea 88 60 b1 e4 81 96 d9 61 09 c6 e2 ac 46 f6 3b aa 79 64 75 4c ea 18 e2 8c 93 af 2e c4 28 55 dd bb 30 50 dc 6f 9a 6d 80 67 09 d6 10 72 4f b5 9a 4d ab 9c 6d 0d c5 b7 f3 d1 0b 09 61 e1 9c 48 cc a8 e1 03 14 d0 58 41 b0 2a 07 70 12 3e 53 82 c8 58 14 93 1c ce e4 d8 a7 cf 72 e5 10 54 d5 3e 87 73 15 37 c6 09 a2 b0 3f 50 54 b4 30 7b 15 db 48 00 b2 90 96 dd 88 8f 24 05 81 a2 23 fa 58 83 ae 4a 2e 01 1c 77 9c 20 c2 06 09 f2 51 b4 f8 2c 4a 22 1e 10 b0 ec 36 37 9a 6b 42 6e 28 34 b4 7f c9 50 d0 89 ff 00 92 36 d9 b7 51 2a 78 9a d6 dc 10 75 f9 ec d1 6a 81 5a 6c ca 56 55 91 02 Data Ascii: "!l?@tZ8J_ Jp\|XPC(Flj0N?`aF;yduL.(U0PomgrOMmaHXAp>SXrT>s7?PT0{H$#XJ.w Q,J"67kBn(4P6QxujZlVU
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 00 27 10 01 00 02 02 02 02 02 03 00 03 01 01 01 00 00 00 01 00 11 21 31 41 51 61 71 10 81 91 a1 b1 20 40 c1 30 f0 d1 ff da 00 08 01 01 00 01 3f 10 ff 00 49 f6 00 b2 f4 19 84 4b a7 94 86 4c de 00 94 8f 24 30 4c ae aa c5 37 55 c4 8c 8f d5 cd b2 43 2a e9 2d c2 38 5e c8 b0 70 d2 a9 5f ea 90 d3 de 44 d2 dd 49 dc ec 36 98 e2 24 91 f6 90 b5 86 00 0b 73 db cc 5b 9c 26 6c 1c 18 01 11 dc a9 cd 99 c4 57 ac 0a 1e 7d ff 00 a8 e9 98 4b 5b 5d 68 8e c5 09 72 c9 7f 0b 0b d9 dc 5a ed 1c 68 b0 fb 06 6a 1d e4 fd eb 85 ff 00 54 61 9d 5b ea 08 a0 57 68 f6 10 2f 87 da 96 1c 63 e0 65 e0 79 38 88 8c d9 ea d7 28 16 b4 6e b9 9e 2c c8 63 fd 24 54 62 84 3e 8b e6 50 5a f4 1b f1 de 11 8c a0 2d bc 91 55 07 17 4f a6 c8 19 72 1b 47 04 eb 1f a6 10 0e b7 9c 0c d2 0f 2c 1c 0b 7a b9 9e 04 6b Data Ascii: '!1AQaq @0?IKL$0L7UC*-8^p_DI6$s[&lW}K[]hrZhjTa[Wh/cey8(n,c$Tb>PZ-UOrG,zk
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: e8 8d 25 2d da 59 07 0a 40 c5 2b ca 31 a5 42 8b 8b f0 03 b6 1b 09 49 40 1b 28 84 f9 f2 41 ef 92 70 e3 6d 09 ec 8c 74 47 81 9c ea 36 c2 dc 47 99 5e 2f 19 cf 0d d5 d7 2d e4 5f 4e 22 c0 47 91 df 98 de e9 03 81 8d dc c1 91 9c a8 e1 88 0f 44 22 b0 9e b9 b1 7e 07 04 04 80 11 7a cd 89 18 2f b3 17 6b 8f 81 2b 47 2d a5 d3 80 a8 a8 97 76 6b 60 a4 00 de 85 a6 97 4c 4c a8 64 3f 0d 42 d9 09 85 ac 52 4d c4 b0 e7 c3 2f ca 70 95 4e 15 0d 1e 60 69 cb f5 14 aa e6 fe 02 82 7a e0 fb 50 de 95 48 c7 73 d7 89 77 8a 9f 65 b1 2f ed 5e 52 70 8e 8b 52 37 0a 53 38 82 42 92 76 63 9b 0b 99 28 97 e9 a9 8c 59 6c d0 52 13 ec e2 67 51 d5 ae d9 ab 2a fc ce f8 52 43 9a 5e cf d4 41 5a 5a a6 bb bf 91 86 98 fa ac 86 02 20 5d 2e 43 36 5e 65 17 46 18 71 80 3d 5c 39 f5 75 01 af a9 a3 61 79 a6 3e Data Ascii: %-Y@+1BI@(ApmtG6G^/-_N"GD"~z/k+G-vk`LLd?BRM/pN`izPHswe/^RpR7S8Bvc(YlRgQ*RC^AZZ ].C6^eFq=\9uay>
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 4b 81 d3 46 17 86 0f 4d 5b 2e 2b e8 6a 54 d2 65 45 88 f6 b2 91 76 85 75 ee 20 56 3a 25 46 35 33 01 82 29 4b 33 89 61 1c 4b 8b f0 7c 24 3a c0 a4 65 e5 33 9e 07 11 69 a4 0b b6 86 82 04 d9 a1 74 69 39 74 aa 9a 4f 93 98 7b 75 0c 5c 4a f0 70 65 f4 42 dd 4d d1 77 0a bf 60 e0 70 25 ed a5 93 d9 52 f3 70 91 11 f3 0d 55 5a 65 cd 6f 17 99 9e 0f d7 1e 1a 3a 87 bf 23 93 81 d3 09 bb bd 35 f8 20 04 98 88 ad c1 56 16 0b f0 fc 16 1c 9c b4 80 43 af 03 56 cc b8 55 07 01 ca 10 12 a9 7c 3b 29 3e b9 1c 36 2e f7 8c 30 9c 6a 65 c5 1c c0 63 21 03 80 9d 84 57 aa 6c b6 32 ed bd dd 4b 07 69 90 71 1a ff 00 56 3f 08 3a b7 73 36 cc 6f 15 5e ae 2b 0b d8 b3 5f 16 da d7 03 c4 5b 04 f1 32 02 a1 a1 58 8a c3 35 1b f8 0f 85 42 ac 78 01 c2 8e 5f 2c 54 7a ec 31 e8 8b 2b 86 87 91 ff 00 88 f6 2d Data Ascii: KFM[.+jTeEvu V:%F53)K3aK\|$:e3iti9tO{u\JpeBMw`p%RpUZeo:#5 VCVU\|;)>6.0jec!Wl2KiqV?:s6o^+_[2X5Bx_,Tz1+-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49880	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:03 UTC	548	OUT	GET /dsPlayer/player.css HTTP/1.1 Host: gomo.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gomo.to/movie/passengers Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	302	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:04 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Last-Modified: Wed, 31 May 2017 03:35:03 GMT ETag: "4072-550c99b0507c0" Accept-Ranges: bytes Content-Length: 16498 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: text/css
2024-12-17 10:52:04 UTC	7890	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 7d 0a 2e 70 6c 61 79 65 72 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 21 69 6d 70 6f 72 74 61 6e 74 20 7d 0a 2e 76 6b 70 73 5f 61 64 76 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 20 39 39 Data Ascii: html, body {margin: 0; padding: 0; background: #fff; width: 100%; height: 100%; overflow: hidden; font-family: Arial, Helvetica, sans-serif; }.player {position: inherit!important; vertical-align: top!important }.vkps_adv {position: absolute; z-index: 99
2024-12-17 10:52:04 UTC	8000	IN	Data Raw: 64 69 75 73 3a 20 35 70 78 3b 20 77 69 64 74 68 3a 20 31 33 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 20 72 69 67 68 74 3a 20 35 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 20 7d 0a 2e 61 64 74 69 6d 65 20 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 39 41 39 41 39 41 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 63 6f 6c 6f 72 3a 20 23 31 31 31 3b 20 66 6f 6e 74 2d 77 Data Ascii: dius: 5px; width: 130px; position: fixed; bottom: 5px; right: 5px; z-index: 99; cursor: pointer }.adtime {line-height: 30px; padding: 5px 0; background: #9A9A9A; width: 100%; display: inline-block; margin-top: 4px; text-align: center; color: #111; font-w
2024-12-17 10:52:04 UTC	608	IN	Data Raw: 2d 77 69 64 74 68 3a 20 36 31 39 70 78 29 20 7b 0a 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 20 7b 68 65 69 67 68 74 3a 20 38 35 70 78 3b 20 6c 65 66 74 3a 20 34 32 25 3b 20 77 69 64 74 68 3a 20 38 35 70 78 3b 20 7d 0a 2e 63 68 65 63 6b 72 65 73 75 6d 65 61 72 65 61 2e 63 6c 65 61 72 20 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 2e 6c 6f 61 64 63 63 61 72 65 61 62 6f 74 74 6f 6d 2e 63 6c 65 61 72 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 3b 20 7d 0a 2e 6c 6f 61 64 63 63 61 72 65 61 2e 63 6c 65 61 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0a 0a 7d 0a 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 Data Ascii: -width: 619px) {.video-js .vjs-big-play-button {height: 85px; left: 42%; width: 85px; }.checkresumearea.clear {margin-top: 100px; padding: 10px; width: 100%; }.loadccareabottom.clear {margin: 20px 0; }.loadccarea.clear {width: 100%;}}@media only

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49892	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:04 UTC	1371	OUT	GET /css/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1 Host: alluc.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://alluc.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://alluc.co/css/bootstrap.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=9P70bx_5jWz1clujfD106YrXyoM7RswDKoPBOaAeohA-1734432670-1.2.1.1-vBETdO2SY75GNZ.iSQS2MrVES1cd24truIXknjPjIOjCTZcCGIy270hoTm65Mr2N.UrpDRQSLMhjXBMRR99wcNkUqiyA2GRqssKswIjQGnVNdzHJSGferZ6dcU6i2lmzt0pWKB8qoV_wfZ82x.cD9_AB8s7zqvy73zmayq817Sd_ppk3IjiQ4h6t7sh0uX9R0XAgiNypb.OPo2hVJNCYeQxv84IphQpYTIi0moHr6CWEtjfcOdXR6Ihu0tV3JLZ2eZuBNlj77tbJhPN5C9dbLl7RgkJcYEw80uoUOGdKpVipYpcgOAJ8h5vP6KDucDq4eBPkzZ.hF8kGLNB0p7WlygmmiDQ5S6fcad1KdhRHd45wGMGo4YSGXa8_TIwRe9qEoz01koqCrGDA5Be0qpAR9_fXFSe_g9o.2FYEj4TOp3M
2024-12-17 10:52:04 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:04 GMT Content-Type: font/woff2 Content-Length: 56780 Connection: close Last-Modified: Wed, 15 Jan 2020 17:50:30 GMT ETag: "ddcc-59c3158298580" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5509 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQfwt7Pk%2Ba%2BC12%2FIbRzQYobQeLLiq4VMygEl9jJQ0DpqgAPGfTqALr%2BvJCDAz9HFmoknivAkM2WJF%2F9xanEKgCztgNjr7kdQ8pHNmxinF%2B6acx3FEkrWaIilvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c90aa874368-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1688&min_rtt=1679&rtt_var=649&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1949&delivery_rate=1660978&cwnd=233&unsent_bytes=0&cid=0158a451b53b150b&ts=451&x=0"
2024-12-17 10:52:04 UTC	467	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 dd cc 00 0e 00 00 00 01 dc e4 00 00 dd 6c 00 04 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 85 42 11 08 0a 86 e3 64 85 b4 5a 01 36 02 24 03 91 2a 0b 88 5c 00 04 20 05 87 00 07 ab 1e 3f 77 65 62 66 06 5b 05 80 71 86 71 7b 21 51 d1 9d 50 ea b7 f7 d2 1b 87 19 05 ba 1d 44 41 c5 ef b7 6e 85 ec 7c 31 be a3 fd f9 a9 d9 ff ff ff bf 20 59 8c e1 ee 0f bc 47 40 54 75 3a 4b 5b 55 33 b2 9e fa 84 2c c8 e1 a6 14 47 ca 5e b3 63 28 70 d4 36 62 f2 8a 6c 0a 66 2d 6b bf 6e fe c0 2e 47 35 07 e6 9e 54 2b 33 d5 8a e3 69 8b 15 9e 4c 70 26 e8 c8 65 6c 27 e6 08 d5 7c 88 26 85 cd e2 9f 44 21 99 5e 66 69 76 4d 33 5c 53 29 bd 51 98 07 4c fc e6 8d 4e 5f e6 b6 82 2b 5b f9 21 c8 b8 53 e7 17 bb 6d 51 f8 Data Ascii: wOF2l?FFTM`BdZ6$*\ ?webf[qq{!QPDAn\|1 YG@Tu:K[U3,G^c(p6blf-kn.G5T+3iLp&el'\|&D!^fivM3\S)QLN_+[!SmQ
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 5d 37 6e 6a 07 00 0f d2 7d f9 32 99 9f f9 bb e0 f5 9b 4a 7c 8b 96 6a e1 22 9f c4 05 3e 74 21 aa 31 dd b9 b9 20 39 17 63 c3 ad 05 d4 79 b7 05 14 8e a5 2f 2b dd ce 97 53 ff 7f 24 c7 49 aa b1 8a 69 fa 90 60 c0 50 4a 0c ba 04 49 0d da 8c ee d2 3a 7f a7 91 0c 49 d1 49 0c 49 4a 01 2c c1 e5 dc 0e 14 36 ed e7 1d 51 b7 65 95 a9 31 d8 77 1f b9 5e 9f 54 7e 6f 4a 06 d9 26 96 05 11 a2 8f 2d 8f ff ff fd 9f 5a d2 2c 4b c9 62 ec 00 62 01 f8 4a 2a a7 a9 67 0b 94 02 39 fa 31 fc f9 c5 43 80 49 91 c3 82 d8 d9 33 13 6a b2 48 a9 1d ec 40 74 5f 64 ac b2 3b 93 27 7e f8 ff 39 fb ce 19 de da 39 bb 7e 25 24 c8 48 b0 04 68 a7 f5 29 e3 7e a5 85 1a a5 f2 ac d3 ed 76 84 e4 fe 24 bb 9e fc 12 47 da 4e 4c f0 42 20 09 52 a5 4a 39 d2 d7 8e 3c aa 6b cf 14 6b 9b df 82 86 e4 1f ab 32 44 f0 16 Data Ascii: ]7nj}2J\|j">t!1 9cy/+S$Ii`PJI:IIIJ,6Qe1w^T~oJ&-Z,KbbJ*g91CI3jH@t_d;'~99~%$Hh)~v$GNLB RJ9<kk2D
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: b5 9a 4e dd 60 11 5c 42 92 58 e3 44 17 f3 ac 30 05 1c 9d c7 d7 5c 91 4e 3b 4e e2 c0 1f 59 10 2d 11 c7 4c 35 5c 11 7b 2c c3 50 a6 ce 91 4d 10 60 52 44 78 c3 2b 04 c6 69 e4 cd 5c 9a 9d 4d b2 41 8a 2c cc f3 82 b7 b0 b2 59 23 61 c7 6a 89 c7 aa 50 50 58 3d 84 5d ab 73 82 78 3d 13 c3 d2 cd 3f f6 65 3d 5e ab 62 ea 2c ad e6 6d 30 c2 ed 0b 89 0e ec b3 8c 74 c4 c9 d9 62 e1 25 27 e6 1e b5 9c 90 c4 5c 7a e3 58 ff 61 a9 79 c1 e2 dc f0 7f f8 7d 82 a7 ba d9 73 39 ef 51 f7 7a d1 31 a4 b2 27 15 c3 c0 33 8c b6 95 4f 85 7f 20 1d 09 0f 66 61 54 98 8b a4 67 98 ad 9b 89 a0 c1 d8 82 a1 73 cb 3e dd 34 76 e9 f8 cc 98 32 43 d5 82 ec 6f 5f 28 c4 96 bf ea dc 7b a0 a6 90 d7 5c 32 3f b6 f6 c2 95 ea eb af cf 01 9e 61 c7 0a 50 b1 2f 0c 16 eb 14 ef 7c bd 3f 79 2a bf d7 ec 4b 41 ed a1 dc Data Ascii: N`\BXD0\N;NY-L5\{,PM`RDx+i\MA,Y#ajPPX=]sx=?e=^b,m0tb%'\zXay}s9Qz1'3O faTgs>4v2Co_({\2?aP/\|?y*KA
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: b6 23 61 59 08 05 63 d5 47 d5 66 55 a4 21 b4 9c 8e c7 5c d6 9c 4b 71 60 12 b1 71 f4 70 0b 31 0d 21 67 0a b7 a7 f2 7a 36 73 da db 96 1a b9 2e 9d d1 74 f2 70 3e 99 1d 89 59 ee 0a f0 f5 8e b0 be 98 83 60 c0 79 02 f8 ab e7 81 48 3b 0b f2 70 b7 11 ca c8 e3 2c 80 95 70 48 a5 8a 7d ae 23 ee 1d bd e9 99 6a 3a a3 4a 41 2d 27 58 bb 9c 87 bc 22 7a 99 5f 4f 53 8e 99 c5 db 7b 93 67 38 d8 8f ea f1 9e fd fe ed 06 7c 83 94 78 13 5b 58 a1 55 96 7f 20 07 3b 51 4f 9b 9c 54 6d 49 af 05 a1 74 79 7d e3 37 30 95 2c b5 7e 50 3a 89 a1 79 0c b5 3d 36 52 e8 ba ed b4 e7 6d c9 17 59 10 82 fd e0 4a 2d e4 fc c1 2a e8 84 75 39 9e 8e 91 cb bb 8a c8 9c 00 60 06 5f 1a 32 38 6e 91 14 80 d3 fe f3 8d fa 03 ca 81 f7 e9 ea 1e 62 a7 d8 2d 35 dc ee 23 70 d1 3b 62 9d 96 e7 48 13 51 48 d5 7d fa 18 Data Ascii: #aYcGfU!\Kq`qp1!gz6s.tp>Y`yH;p,pH}#j:JA-'X"z_OS{g8\|x[XU ;QOTmIty}70,~P:y=6RmYJ-*u9`_28nb-5#p;bHQH}
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 8e d3 2a b1 e3 0b c9 df bc 14 fc fb 31 a5 16 ac f3 5a 78 a4 5b f9 fd 71 7f 14 91 85 48 1e c9 76 7d fd 16 4f 9f a6 f5 a7 66 bf f0 35 32 6a 21 e4 0d 68 4f 54 21 51 a8 c2 6d ce 6d 71 87 c3 52 88 d2 86 a2 64 8d 15 cd 31 97 f8 b9 ee 69 b6 68 27 9c c4 2f 37 86 4f 9e 3a 53 35 f8 60 cb f9 a6 81 46 2a 90 1d 86 e0 d6 bc f1 ea 4b b8 89 65 ff 6a 57 9f 2b e5 6a 0e 6e dc bb 47 18 1e 74 0f c1 99 0d b8 fa 83 88 d7 ba fb dd 69 b7 3d 5a e9 e9 a1 0a 6d eb 60 14 92 62 11 03 08 13 d8 a2 cf d4 fc d2 e1 f8 a2 5d 91 6f f6 2c f3 67 f5 8d df 98 c9 d7 7f 03 43 dd 55 61 b9 65 2f 67 55 50 52 da ab a7 2a e8 72 f8 56 4f ab c7 99 54 4f 55 80 e0 1a 94 1e 20 08 28 2b ab 6f 5e ca 12 77 e2 d2 ff 93 46 24 2e 74 bf 4a cc 93 ba c5 18 e4 6d 31 5b 01 28 3f 3d d9 40 38 a4 b5 d5 35 2a e3 c2 1d 87 Data Ascii: 1Zx[qHv}Of52j!hOT!QmmqRd1ih'/7O:S5`FKejW+jnGti=Zm`b]o,gCUae/gUPRrVOTOU (+o^wF$.tJm1[(?=@85
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 93 f7 2a 05 cc 8f b2 6e 23 19 06 fe 00 cc 3a b2 48 ae 99 1b e6 8e e9 ee af e0 62 6e 84 76 69 ba 27 92 d6 82 8f 53 cc b6 91 f4 5e 2a 1b 56 c4 c0 99 cb 71 7c e0 6a e5 98 2e 37 f8 33 81 5b b9 31 a1 26 76 5c 83 56 da 6c 84 81 08 a6 e4 68 f1 c3 45 dd 35 c3 a2 18 dc a6 63 4a c0 b7 3c a2 8f ac d2 54 50 f6 71 5f 7b cf f0 1e bb bd c2 69 36 4b 18 3f 98 83 19 02 cf cf e7 44 01 c7 c7 f8 20 8a 24 51 88 6c 34 e0 16 4e 84 dd 6e d8 28 12 65 08 0b db d4 f2 75 7a ad ea 3a d5 35 4f 30 13 65 65 0d 5a ad 9a 94 51 60 ab 4e 9f cf 44 c8 e5 02 3a 6d a4 f4 33 a0 c9 ff 30 6f 65 f4 f1 ac b5 74 02 d8 ba cb 89 e3 99 09 d4 67 46 c7 e4 8a e5 ce 19 94 58 48 75 40 d4 11 20 73 e4 33 a0 a2 f5 f2 20 d6 6a b4 e6 2e ed fa b3 5d c2 58 e7 5c b5 74 f1 2f ed 02 8d 48 20 37 e4 85 d3 d1 58 3d 6b 8d Data Ascii: n#:Hbnvi'S^Vq\|j.73[1&v\VlhE5cJ<TPq_{i6K?D $Ql4Nn(euz:5O0eeZQ`ND:m30oetgFXHu@ s3 j.]X\t/H 7X=k
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 6a c4 30 2b c1 44 bc ab 73 aa 02 50 df ec 59 54 e7 1e d7 a7 77 44 9e 0a dd b3 f9 d4 a1 f3 a7 38 59 bd e7 84 41 57 e0 ee 27 fd d7 ce 5b 4a cf ca 92 cf 97 cf 6f 3f 43 cc ec 30 fb 82 19 5b 8b b4 c9 6d ea 55 47 7c 8a b6 63 7f ec 30 7f 9d e2 dd 4a 3d 0d fe c8 ad ee 3f fe 08 54 56 45 57 dc 9e 15 37 39 64 a2 f2 8f 67 dc 72 47 34 20 56 4e 92 aa a9 cb 1d a9 15 8d 71 a7 66 62 13 c2 93 cd ed 2d 04 fd 42 cb 61 88 a0 9f 06 4b 75 04 2d d8 ba f5 94 f4 fe a3 76 4a 42 c7 b6 22 b0 bf b7 19 d3 fd cb 2d 98 86 16 6b 11 d8 df a9 41 f8 94 c9 66 0e 97 ec c3 d8 e2 f3 4c 2a b3 a6 4b 20 8a c8 c7 2a 54 73 36 89 d7 44 ee 7d e1 bd 8a 2f 83 92 c8 d8 22 90 91 f5 82 26 bf 7a b5 a7 fd 6d b2 de f6 a9 84 09 46 d6 7f a1 3d 24 21 a9 f9 0d 6b a2 9c 97 97 32 f4 f2 e7 a0 bb 70 a5 f5 d6 61 e0 87 Data Ascii: j0+DsPYTwD8YAW'[Jo?C0[mUG\|c0J=?TVEW79dgrG4 VNqfb-BaKu-vJB"-kAfLK Ts6D}/"&zmF=$!k2pa
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 70 6c 78 6b 07 a1 50 17 cc 0d a5 4e 32 d5 1a 17 e6 db 6f df b8 8e 97 7a b7 c0 fb d6 6e 1a d2 86 d5 7a 75 5f 20 5f 60 21 89 db d3 14 5b 57 1f 3d f3 c2 86 72 db a5 c8 0d b7 1f b6 aa 3d 35 ea 3f 08 e9 24 7d 59 bc 3c ab f4 e6 6d 2a 5d 2f b8 8a a1 ad 19 4b 12 f9 50 5f 95 3f 77 57 e8 6d 1a 7a 02 7c 48 d8 1c 00 07 c0 ac 25 d9 e5 55 c8 ac d7 e6 54 ec 57 6b 7b 64 6c c5 3f a2 4a ca 9b d0 30 85 5e 8a 8f 4f f6 4a 30 37 89 04 5c cf e3 18 88 32 52 2a 55 c3 0c 4e c1 36 6f 2e f7 ad 9e b6 b2 c7 70 f5 9c a9 4a a6 2a 7e b0 43 f5 38 93 4e 2a 6e c9 b2 6a 75 75 3a cf 91 0e c9 fd 8b af b9 64 ae f4 ba 17 c1 15 8c 10 21 94 e6 e7 be b2 ef 08 ff 17 6b 15 fd be 7b f4 88 80 02 f0 f7 63 03 63 90 83 d1 be f1 be 49 04 86 d1 d4 ea 71 dc 3f e9 8f 07 a9 0a 4e e1 b4 4f 4b 6e 41 a6 bd cb 34 Data Ascii: plxkPN2oznzu_ _`![W=r=5?$}Y<m]/KP_?wWmz\|H%UTWk{dl?J0^OJ07\2RUN6o.pJ~C8Nnjuu:d!k{ccIq?NOKnA4
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 05 7b 02 2d e2 52 e9 72 6a 17 bb f0 af fa cb 01 2b 5e 24 35 cb 40 d5 f2 17 ae eb a0 b4 76 b9 50 8f bb 5a fb f0 8f fe cd 27 fc 29 f0 c5 fd 40 bd e2 9f b9 4b c8 e5 1f ed 90 ff e7 7f 3f f4 2f 01 44 7a ff 0a b1 e6 09 f9 e3 7d fd 11 0c bf c1 07 f2 e3 d0 9f 09 95 b4 e8 83 08 62 ad 96 e7 75 5a 9e ff 29 79 fe 42 16 75 ff 3f 73 a8 67 fa b9 bf f6 59 18 e3 b8 07 b1 dc 63 53 37 16 9f b2 7d 46 ba 3d f4 c5 cf ec 40 4e 8a 98 03 2a 69 f5 62 46 5d df 8d 3c ba f0 df a2 85 f6 94 e3 1b 7d 13 1f c9 82 6b 20 d9 dd 22 7a 5c 32 e8 49 f9 8f 79 68 31 5f 2f 11 17 e6 07 84 66 94 a3 3a a5 9d 32 c9 f2 28 94 88 c5 2c 02 08 95 48 1c b2 6c 60 39 cf f2 97 c2 5c 84 aa 81 08 28 54 84 3b f2 4d 90 19 16 0f a9 cf bb 34 f2 37 1f 1b 30 e2 fc 82 46 c1 7f eb 30 87 27 30 1d f4 b3 52 4b 03 c7 b7 c3 Data Ascii: {-Rrj+^$5@vPZ')@K?/Dz}buZ)yBu?sgYcS7}F=@N*ibF]<}k "z\2Iyh1_/f:2(,Hl`9\(T;M470F0'0RK
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 0a 0e f4 bc 30 92 da 09 82 0c 05 42 1e 8e 3f 10 ab 55 fe 2f 00 b1 bf e7 c1 47 e1 2a 01 07 ca 0e b2 a9 38 d4 d3 e2 3e d8 ee 6f ca 0f 02 63 ca 74 49 35 c1 c3 ea 06 12 1b 43 2f 1b f4 a8 a8 31 a3 3c 14 02 af f0 48 c4 12 05 f2 9c 35 a3 62 90 04 38 45 c6 4b dd 6d a5 72 a5 85 af 98 e3 e6 c7 0a f9 e2 89 95 c7 4e 99 6a 94 14 51 d2 77 fc 2c f4 81 fc ca af af 7b d1 fb 2c 7e db 47 9d 8f f1 a6 4b be 69 91 7d ac c1 e2 fc f4 41 bb 06 02 53 7d 2b 5d d3 4b ce 22 af 92 58 54 73 83 66 bd b6 26 08 df 83 c4 99 07 54 49 a8 0e 07 23 12 9b b6 1f 69 69 1e 2b f6 94 a2 70 a4 4b f9 9c bf 1b ff c9 02 84 65 be b1 22 85 3e e6 7e b7 58 18 33 4b ba d9 aa e8 f9 88 c0 06 67 6e 89 ad b3 2d 78 ec 22 ef 2b ee 33 63 c9 eb 49 c4 a9 e5 01 db 56 00 b2 37 f0 60 36 99 31 df 17 57 2d dd e1 ed ae 5a Data Ascii: 0B?U/G*8>octI5C/1<H5b8EKmrNjQw,{,~GKi}AS}+]K"XTsf&TI#ii+pKe">~X3Kgn-x"+3cIV7`61W-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49894	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:04 UTC	354	OUT	GET /images/logo-footer.png HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:52:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:52:04 UTC	900	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 74 59 4a 6d 6e 52 57 4d 39 33 73 2f 72 78 41 51 71 37 2b 71 33 56 6e 7a 31 62 52 58 63 59 4c 49 6a 53 49 68 73 32 79 6e 79 70 4b 45 50 70 39 63 44 66 41 77 54 52 43 30 41 77 66 58 37 78 4d 55 4f 6a 72 69 62 50 4d 59 6b 68 52 4c 4f 61 2b 78 4a 46 46 77 76 39 4b 39 35 37 63 36 68 63 58 73 6d 35 58 55 44 75 63 45 59 46 6f 3d 24 4d 43 6e 66 76 37 6b 55 4f 36 6e 79 6a 77 39 31 58 77 70 54 46 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: tYJmnRWM93s/rxAQq7+q3Vnz1bRXcYLIjSIhs2ynypKEPp9cDfAwTRC0AwfX7xMUOjribPMYkhRLOa+xJFFwv9K957c6hcXsm5XUDucEYFo=$MCnfv7kUO6nyjw91XwpTFw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 32 32 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2235<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 62 70 4c 6f 54 73 35 49 30 4f 55 46 54 6c 37 51 63 6f 45 4c 39 6b 6f 49 63 70 71 4a 38 33 53 75 5f 45 5f 73 41 6b 4d 42 67 61 44 4c 70 31 42 6a 67 6a 30 2e 73 6e 34 79 4f 49 67 57 78 30 41 59 74 32 69 38 57 62 34 55 56 54 4e 63 77 61 64 5f 4c 62 70 67 6d 43 6d 5a 41 2e 32 34 41 50 46 30 51 30 42 75 4c 4f 6d 46 59 69 32 58 72 73 78 39 51 4c 6b 73 78 78 43 78 72 31 41 2e 45 33 4b 5f 39 76 42 6b 31 78 70 74 55 51 72 37 43 34 76 50 4f 4d 65 5a 34 59 46 50 71 57 76 39 37 64 73 2e 72 39 4c 4a 47 74 48 79 6a 74 32 35 72 6b 68 58 6f 74 71 68 35 57 31 4a 39 6e 57 2e 67 51 38 53 62 31 73 72 49 78 57 73 50 77 54 57 51 53 70 6a 39 2e 6c 34 75 4f 4f 64 4b 42 67 34 71 68 70 65 6e 68 6f 37 77 50 71 32 4c 2e 5f 6b 52 55 73 34 56 66 41 30 58 68 50 70 4f 46 66 31 30 43 4f Data Ascii: bpLoTs5I0OUFTl7QcoEL9koIcpqJ83Su_E_sAkMBgaDLp1Bjgj0.sn4yOIgWx0AYt2i8Wb4UVTNcwad_LbpgmCmZA.24APF0Q0BuLOmFYi2Xrsx9QLksxxCxr1A.E3K_9vBk1xptUQr7C4vPOMeZ4YFPqWv97ds.r9LJGtHyjt25rkhXotqh5W1J9nW.gQ8Sb1srIxWsPwTWQSpj9.l4uOOdKBg4qhpenho7wPq2L._kRUs4VfA0XhPpOFf10CO
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 7a 48 37 56 78 50 33 45 64 50 37 54 78 34 4c 75 30 6c 54 58 6d 6a 38 4f 68 56 54 77 77 32 67 59 59 52 34 49 44 77 47 47 67 72 4f 64 44 34 76 49 42 78 52 4a 44 42 6b 46 4c 65 47 48 6b 5a 65 38 49 57 6e 57 64 63 4f 4c 63 56 34 6c 50 48 38 5a 71 54 58 4f 69 36 55 6b 30 34 71 73 6c 48 59 33 73 48 55 53 45 55 4a 2e 62 78 4d 74 6f 70 53 4c 39 4e 6c 68 51 7a 7a 59 7a 4d 5a 2e 5f 42 78 63 77 63 71 61 59 79 44 67 77 4d 75 45 54 6b 4d 41 75 52 5f 61 4e 4a 61 75 6d 4e 56 57 57 65 6b 6a 4b 65 33 64 2e 59 76 58 79 4e 48 34 34 75 79 39 42 50 77 38 4e 43 62 54 37 70 48 5a 42 73 42 78 6a 4b 72 70 63 39 52 77 69 55 37 76 75 56 39 76 63 37 33 4e 6c 49 42 6a 39 54 4c 6c 30 69 37 74 73 4e 35 2e 75 74 49 6c 38 7a 5a 50 66 4a 6f 30 50 35 6d 57 4a 61 75 55 4f 6f 31 66 77 5a 4e Data Ascii: zH7VxP3EdP7Tx4Lu0lTXmj8OhVTww2gYYR4IDwGGgrOdD4vIBxRJDBkFLeGHkZe8IWnWdcOLcV4lPH8ZqTXOi6Uk04qslHY3sHUSEUJ.bxMtopSL9NlhQzzYzMZ._BxcwcqaYyDgwMuETkMAuR_aNJaumNVWWekjKe3d.YvXyNH44uy9BPw8NCbT7pHZBsBxjKrpc9RwiU7vuV9vc73NlIBj9TLl0i7tsN5.utIl8zZPfJo0P5mWJauUOo1fwZN
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 6a 4f 44 77 54 77 68 6b 79 33 79 6f 45 6b 30 75 44 46 4c 33 64 77 73 4f 33 52 63 53 4d 6a 37 4b 5a 5f 63 70 32 59 4b 65 33 35 72 55 4f 4c 38 69 44 46 74 50 46 47 56 31 6a 31 47 44 49 72 62 71 75 65 46 30 67 76 43 63 68 33 54 77 79 44 51 75 41 2e 36 6e 4e 73 6a 69 74 76 76 6f 4d 78 45 30 35 66 61 37 4a 31 67 6d 73 58 59 41 6c 4d 46 72 56 7a 46 69 6e 6f 4c 4c 31 41 30 6e 2e 71 57 67 31 67 43 6a 69 6d 6d 66 59 63 74 6d 31 63 68 34 34 44 79 42 30 52 4f 73 39 54 70 43 45 42 32 54 6a 57 79 5a 39 57 46 52 77 6d 35 47 38 45 4e 30 7a 65 36 62 42 7a 52 79 65 58 46 2e 77 50 50 36 59 4c 54 51 6e 65 43 63 71 77 59 74 6a 46 54 70 43 54 31 75 39 7a 69 73 6e 6a 5f 41 54 55 33 32 76 79 43 73 38 36 30 64 6f 34 57 66 31 57 41 6b 55 43 4b 2e 78 66 65 48 4b 6b 70 2e 35 56 64 Data Ascii: jODwTwhky3yoEk0uDFL3dwsO3RcSMj7KZ_cp2YKe35rUOL8iDFtPFGV1j1GDIrbqueF0gvCch3TwyDQuA.6nNsjitvvoMxE05fa7J1gmsXYAlMFrVzFinoLL1A0n.qWg1gCjimmfYctm1ch44DyB0ROs9TpCEB2TjWyZ9WFRwm5G8EN0ze6bBzRyeXF.wPP6YLTQneCcqwYtjFTpCT1u9zisnj_ATU32vyCs860do4Wf1WAkUCK.xfeHKkp.5Vd
2024-12-17 10:52:04 UTC	1369	IN	Data Raw: 52 64 43 34 78 6c 6b 41 79 53 33 38 62 4d 4f 36 6e 64 47 64 6c 4d 65 38 4c 44 70 73 38 47 46 79 62 79 73 6e 7a 6d 4f 61 6a 38 32 74 43 44 62 45 43 78 62 74 71 74 78 37 4e 66 4b 75 6a 55 42 74 6c 46 6a 47 4c 33 30 4e 68 49 41 63 6b 66 72 33 30 4a 39 68 48 48 5f 70 58 61 47 66 49 78 64 76 67 4f 6a 64 4c 36 71 32 77 45 56 66 6f 73 64 48 69 50 31 52 55 48 50 2e 62 53 39 6a 67 57 31 65 69 6a 56 39 30 49 65 45 6a 52 75 43 73 48 43 76 6a 62 37 76 6c 41 63 76 6c 32 31 64 64 66 6d 37 77 68 6c 6c 33 7a 6c 48 30 35 63 52 65 62 41 38 34 72 31 2e 62 73 66 35 58 42 51 74 52 59 39 53 65 67 76 4c 62 48 37 66 42 73 31 75 6e 4a 5f 2e 73 62 31 77 62 62 71 76 7a 6d 4d 7a 72 36 42 49 69 4c 4d 4f 6d 4d 55 48 6b 58 62 4d 6b 50 6c 39 54 48 56 53 48 76 6e 70 43 37 56 49 77 43 65 Data Ascii: RdC4xlkAyS38bMO6ndGdlMe8LDps8GFybysnzmOaj82tCDbECxbtqtx7NfKujUBtlFjGL30NhIAckfr30J9hHH_pXaGfIxdvgOjdL6q2wEVfosdHiP1RUHP.bS9jgW1eijV90IeEjRuCsHCvjb7vlAcvl21ddfm7whll3zlH05cRebA84r1.bsf5XBQtRY9SegvLbH7fBs1unJ_.sb1wbbqvzmMzr6BIiLMOmMUHkXbMkPl9THVSHvnpC7VIwCe
2024-12-17 10:52:04 UTC	551	IN	Data Raw: 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 69 6d 61 67 65 73 5c 2f 6c 6f 67 6f 2d 66 6f 6f 74 65 72 2e 70 6e 67 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 Data Ascii: ndexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/images\/logo-footer.png?__cf_chl_rt
2024-12-17 10:52:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49890	149.56.240.127	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:04 UTC	938	OUT	GET /stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:04 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:04 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 380 Connection: close
2024-12-17 10:52:04 UTC	380	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 35 30 37 36 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 Data Ascii: _HST_cntval="#3Vis. today=5076";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="as

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49900	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	514	OUT	GET /images/mask-title.png HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4329645=1734432721689; HstCla4329645=1734432721689; HstCmu4329645=1734432721689; HstPn4329645=1; HstPt4329645=1; HstCnv4329645=1; HstCns4329645=1
2024-12-17 10:52:05 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:52:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:52:05 UTC	907	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 58 6d 65 36 2f 54 44 74 4c 4d 62 68 35 6e 42 6c 4a 79 58 2b 34 55 44 6e 68 70 4f 64 48 72 66 47 75 73 47 55 49 4a 31 59 53 53 42 79 42 62 6d 31 31 31 32 2f 36 56 52 78 2b 4a 6d 66 76 41 37 30 58 5a 6f 65 2f 45 54 56 42 75 4b 57 41 34 4e 74 73 59 63 76 4c 73 6a 57 65 75 2f 50 6f 44 4f 71 4b 74 73 50 61 4c 58 55 4a 47 73 3d 24 56 6a 72 46 46 32 77 6a 4f 59 45 6c 31 47 4e 76 4d 2b 54 73 34 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: Xme6/TDtLMbh5nBlJyX+4UDnhpOdHrfGusGUIJ1YSSByBbm1112/6VRx+JmfvA70XZoe/ETVBuKWA4NtsYcvLsjWeu/PoDOqKtsPaLXUJGs=$VjrFF2wjOYEl1GNvM+Ts4w==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 32 32 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2288<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 41 79 56 7a 45 7a 36 6c 5f 37 77 6a 48 73 75 37 6c 48 34 48 75 52 52 57 6b 46 63 54 2e 4a 59 78 42 2e 61 37 78 34 7a 4e 70 64 2e 6c 72 41 67 53 74 71 5f 69 78 37 64 35 4b 33 5a 35 70 56 68 64 68 2e 62 66 32 73 46 6b 70 47 73 45 4f 4f 73 78 30 32 32 5f 59 33 52 49 66 70 70 6e 78 54 67 37 48 71 45 70 58 6a 42 4b 75 68 7a 32 4a 74 49 2e 6a 69 36 37 68 39 58 31 76 6e 39 6f 56 35 4b 61 54 53 68 61 43 4a 50 67 30 76 56 6e 43 6d 45 78 44 54 57 50 38 79 4d 65 38 4b 39 56 37 5a 46 33 72 49 75 46 4e 43 6e 71 70 4e 70 68 5f 31 32 7a 49 66 73 7a 6a 47 38 4d 35 6c 4f 43 31 46 32 78 38 69 74 70 76 43 50 62 6b 6b 6b 33 32 32 54 30 4b 77 79 43 52 58 78 50 49 51 74 4a 6b 4d 63 61 57 63 30 6f 75 41 6b 38 74 76 47 61 33 67 39 66 58 77 57 32 63 4c 4f 39 79 32 6e 73 42 61 4f Data Ascii: AyVzEz6l_7wjHsu7lH4HuRRWkFcT.JYxB.a7x4zNpd.lrAgStq_ix7d5K3Z5pVhdh.bf2sFkpGsEOOsx022_Y3RIfppnxTg7HqEpXjBKuhz2JtI.ji67h9X1vn9oV5KaTShaCJPg0vVnCmExDTWP8yMe8K9V7ZF3rIuFNCnqpNph_12zIfszjG8M5lOC1F2x8itpvCPbkkk322T0KwyCRXxPIQtJkMcaWc0ouAk8tvGa3g9fXwW2cLO9y2nsBaO
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 4e 7a 64 4e 49 37 34 45 4e 36 37 54 79 30 4f 70 56 39 66 39 33 31 7a 76 72 43 75 78 72 64 4d 53 47 67 4a 45 32 77 6e 56 55 55 49 50 32 66 48 56 2e 47 46 79 67 34 7a 45 4f 73 68 54 47 5a 59 35 34 4e 6b 4d 71 5a 37 6e 34 45 67 32 44 33 35 77 58 68 51 57 4a 65 42 4b 77 54 6e 67 4a 66 33 31 4c 38 33 48 63 73 68 2e 6d 5f 58 53 71 61 48 67 2e 30 5a 42 6b 31 78 77 65 46 2e 51 7a 37 49 78 37 4b 68 35 34 59 71 65 55 4a 4a 38 64 44 54 35 50 56 33 68 70 4e 56 54 6e 71 57 65 74 72 4d 6b 72 69 41 67 67 6d 4c 30 47 79 6a 63 62 32 50 62 44 42 67 51 7a 39 33 54 43 75 33 43 2e 4e 41 6c 47 42 6f 5f 67 36 53 4d 67 71 4e 66 34 77 49 50 79 59 67 53 4a 57 2e 77 79 51 75 30 72 70 4c 72 4b 6e 75 47 52 4c 4c 54 6f 6f 32 53 54 78 6e 37 6b 54 38 76 6d 47 70 52 4a 38 43 72 34 59 47 Data Ascii: NzdNI74EN67Ty0OpV9f931zvrCuxrdMSGgJE2wnVUUIP2fHV.GFyg4zEOshTGZY54NkMqZ7n4Eg2D35wXhQWJeBKwTngJf31L83Hcsh.m_XSqaHg.0ZBk1xweF.Qz7Ix7Kh54YqeUJJ8dDT5PV3hpNVTnqWetrMkriAggmL0Gyjcb2PbDBgQz93TCu3C.NAlGBo_g6SMgqNf4wIPyYgSJW.wyQu0rpLrKnuGRLLToo2STxn7kT8vmGpRJ8Cr4YG
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 5f 79 79 67 6a 66 55 6d 52 4b 67 56 66 73 6c 38 6e 39 51 5f 55 66 65 34 6d 50 34 36 32 48 4c 37 30 45 59 4a 58 4b 32 4d 45 30 6c 72 32 48 6d 62 34 59 4a 54 48 74 70 67 63 35 31 53 77 4a 4f 4b 5f 41 73 77 51 47 66 32 35 77 54 73 78 61 43 70 6b 46 4f 7a 33 47 61 50 33 6c 6f 43 57 6a 67 35 34 76 67 32 41 36 48 4e 71 79 34 41 31 57 5a 32 5f 55 5a 30 47 6f 70 6e 6c 48 66 72 44 71 62 46 56 35 33 4c 59 68 62 35 6b 66 6a 42 69 69 6d 6c 65 31 51 39 53 50 35 4a 33 77 75 35 6b 75 39 6a 52 72 73 4a 6f 37 75 46 41 67 6e 66 51 73 50 5a 35 71 6a 54 71 79 76 37 65 38 68 6a 4c 30 50 6c 45 52 54 67 5f 33 66 71 59 2e 77 4b 75 5a 37 5a 50 47 65 65 62 73 77 4a 43 53 45 4b 43 57 6d 5f 45 72 6b 57 33 51 4f 4c 56 42 37 31 74 53 35 7a 2e 65 42 54 77 66 50 75 6b 64 31 4b 70 4b 6f Data Ascii: _yygjfUmRKgVfsl8n9Q_Ufe4mP462HL70EYJXK2ME0lr2Hmb4YJTHtpgc51SwJOK_AswQGf25wTsxaCpkFOz3GaP3loCWjg54vg2A6HNqy4A1WZ2_UZ0GopnlHfrDqbFV53LYhb5kfjBiimle1Q9SP5J3wu5ku9jRrsJo7uFAgnfQsPZ5qjTqyv7e8hjL0PlERTg_3fqY.wKuZ7ZPGeebswJCSEKCWm_ErkW3QOLVB71tS5z.eBTwfPukd1KpKo
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 58 35 44 69 4f 38 31 62 39 78 65 43 78 51 72 4a 61 42 2e 6f 79 4d 47 76 6d 57 44 37 57 51 6a 6c 41 34 47 64 38 69 30 53 61 38 2e 66 53 65 41 73 64 77 46 4f 32 42 4d 77 36 4b 46 43 36 55 49 52 31 61 43 72 34 56 2e 56 45 4e 39 7a 6b 35 4c 6d 58 30 6d 51 64 70 6c 7a 4c 5f 38 5a 76 51 75 6f 51 73 62 6f 72 46 66 36 39 59 2e 5a 59 6c 4e 43 4a 68 39 72 61 6a 68 47 74 6a 70 64 4a 6c 74 6c 4b 43 6d 71 65 6d 67 32 32 31 75 65 6f 54 31 5f 30 79 4c 64 71 44 37 6e 56 4f 64 34 46 70 33 50 6f 4d 51 68 76 30 54 7a 74 44 79 70 75 59 68 74 39 6a 47 58 76 62 5a 4d 4e 6c 4d 54 4b 37 57 6a 34 6d 33 35 38 57 54 36 54 65 66 4a 2e 64 4f 37 47 37 61 52 68 79 5f 78 6e 6c 61 52 48 5a 46 70 33 38 48 32 69 71 34 5f 37 54 68 33 4f 43 61 54 47 34 58 62 4b 6a 75 73 42 4e 42 79 33 5f 47 Data Ascii: X5DiO81b9xeCxQrJaB.oyMGvmWD7WQjlA4Gd8i0Sa8.fSeAsdwFO2BMw6KFC6UIR1aCr4V.VEN9zk5LmX0mQdplzL_8ZvQuoQsborFf69Y.ZYlNCJh9rajhGtjpdJltlKCmqemg221ueoT1_0yLdqD7nVOd4Fp3PoMQhv0TztDypuYht9jGXvbZMNlMTK7Wj4m358WT6TefJ.dO7G7aRhy_xnlaRHZFp38H2iq4_7Th3OCaTG4XbKjusBNBy3_G
2024-12-17 10:52:05 UTC	634	IN	Data Raw: 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f Data Ascii: location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_
2024-12-17 10:52:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49901	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	405	OUT	GET /movies/1235897288-poster-I-Can-Quit-Whenever-I-Want-2-Masterclass.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:05 UTC	921	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:05 GMT Content-Type: image/jpeg Content-Length: 18267 Connection: close Last-Modified: Mon, 16 Dec 2024 04:40:05 GMT ETag: "475b-6295bc6470eec" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3380 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XvwoBqsF1%2FycZZUmSgg%2FYgKbWfd8LBnqrroqaqP8nD46Iwfgk5ML69j4ym8ujUUUlTCZsjAbYcOKREPl%2F0Q42HF9fJP6i0%2F3EfFysiiJ%2FfXt1E5RX016Pztewxl%2BcX8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c98496e7c90-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1804&min_rtt=1792&rtt_var=696&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=983&delivery_rate=1544156&cwnd=252&unsent_bytes=0&cid=2fb2aa92e6f4ad83&ts=448&x=0"
2024-12-17 10:52:05 UTC	448	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 07 08 08 07 0a 0a 09 0a 0a 0e 0d 0c 0c 0d 0e 15 0f 10 0f 10 0f 15 20 14 18 14 14 18 14 20 1d 23 1c 1a 1c 23 1d 33 28 24 24 28 33 3b 32 2f 32 3b 48 40 40 48 5a 56 5a 76 76 9f 01 06 06 06 06 06 06 07 08 08 07 0a 0a 09 0a 0a 0e 0d 0c 0c 0d 0e 15 0f 10 0f 10 0f 15 20 14 18 14 14 18 14 20 1d 23 1c 1a 1c 23 1d 33 28 24 24 28 33 3b 32 2f 32 3b 48 40 40 48 5a 56 5a 76 76 9f ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b8 94 c4 f1 3f 4b 50 de 00 a2 c8 08 a2 Data Ascii: JFIF ##3($$(3;2/2;H@@HZVZvv ##3($$(3;2/2;H@@HZVZvvJ"5?KP
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 3d 07 8a aa 79 ab 10 f7 8e e4 40 e7 1e 74 70 7b d3 4e ba 27 49 ad 72 89 cc ce f6 31 b4 e2 ba 6a 7a 6c 9b 03 fa 3e 61 f4 f5 7e 5e ba 44 7d 82 a9 3d c9 00 fe 20 66 84 18 2e 9b 9b 27 56 51 07 76 a9 b8 60 1b f7 96 ea 03 c2 7c d5 90 91 44 d1 be 51 03 af 47 1b c3 36 43 75 4e a2 28 9c 3c 11 a1 8e ec 78 ee b6 aa 9c aa 85 f4 5c ba ef 1b 90 0f 07 68 a0 d5 4d 84 f5 69 cd 32 46 44 88 c1 15 00 ec d1 3a 03 00 e8 4f 2b d4 11 52 9b 2b 64 50 f0 3b 8a 47 08 aa b1 70 92 f2 0c a0 08 84 29 00 2a a4 4a a7 6f ca 6f ab aa 33 31 2d 7d 17 37 2c ea 09 b7 76 87 56 73 49 82 4d 36 12 1e 05 3a ea cf 61 e5 f8 a4 d8 73 f0 a8 db 47 e9 0d 2b 1b da 3c c6 fd b8 a8 95 2c f2 78 0a f2 2c 5f 24 88 d1 74 dd 48 2a 62 b8 8c 2d 8c ed 34 44 33 2d 47 3f be 85 97 a4 84 8f a7 e6 62 24 22 24 8a d6 ee 23 Data Ascii: =y@tp{N'Ir1jzl>a~^D}= f.'VQv`\|DQG6CuN(<x\hMi2FD:O+R+dP;Gp)Joo31-}7,vVsIM6:asG+<,x,_$tHb-4D3-G?b$"$#
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 04 12 21 31 13 22 41 51 71 81 05 10 32 33 61 72 14 20 23 30 42 52 91 a1 b1 34 53 62 c1 15 82 40 43 73 92 f0 ff da 00 08 01 01 00 01 3f 02 f5 df 23 58 35 9c 00 4d b5 40 e3 41 20 4e 91 8c ed 38 04 25 89 c6 81 ed fa a2 f6 b3 b4 e0 13 65 89 c6 81 ed aa d3 c1 fb ad fa ad 3c 3f b8 df aa d3 c3 fb 8d fa ad 3c 3f ba df aa d3 41 fb ad fa a6 c8 c7 56 eb 81 46 d3 00 c2 f8 4d 73 5c 2a 0d 7d fd b8 93 39 1b 90 c5 49 26 92 38 eb 9b 6a 13 0d d7 b4 ee 2a da eb da 35 09 bb 20 28 e5 80 aa ac df b2 e4 31 0a f4 bf b2 e4 0d 45 53 25 90 02 db b7 6f 22 ea 39 a3 7a b0 38 e9 1c 36 53 de 0e bb 73 48 9e bb c2 d6 34 0d 6d 55 d7 06 eb 0a 62 7a a7 75 4f 24 ce d0 4d 34 70 2a 19 04 d5 a0 c9 6d 3c 55 da c6 78 26 e4 d5 6b 1e d6 3f 29 4e cd 9c 55 84 fb 7e 5e fe da f8 0e a3 ab 7b 82 1e 0a 57 Data Ascii: !1"AQq23ar #0BR4Sb@Cs?#X5M@A N8%e<?<?AVFMs\}9I&8j5 (1ES%o"9z86SsH4mUbzuO$M4p*m<Ux&k?)NU~^{W
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 02 13 df 4e 8c a7 f1 68 51 9a 48 c3 fc 93 83 83 a8 73 45 92 30 62 d2 01 4c 8d ef ec b4 9c 53 4d 40 5c 91 70 6d 2b b4 d3 a8 90 29 e3 87 af 69 ee 64 f2 95 5d 62 3c 17 c4 55 70 67 80 51 bc 32 ff 00 88 a2 0e ba 6a 17 48 1a e8 4e f6 2b 76 50 f9 55 a2 06 c3 03 48 f8 a8 86 a3 98 78 28 1f a3 95 ce 1b 8a b4 4d a7 a1 39 ab 43 a9 60 84 6f a7 e1 6e 56 89 44 a6 b8 55 36 d0 74 57 1d 42 14 32 98 a4 04 6f c7 82 14 ba 16 08 2c 31 1e a8 ca aa aa aa d4 e1 a1 78 da 5a bd 1e 6c 5d 70 e4 17 a3 ca 19 5b 87 17 28 6c d3 19 19 56 10 02 f4 69 eb dd 94 20 99 e4 36 e1 56 d8 25 3a 3b 8c 24 06 ab 6c 32 bb 45 75 84 d1 b8 a7 32 d2 f8 e8 58 ec c2 7d 9e 6a 45 ec dd d9 4f 82 66 3d de cc 90 51 b2 4e 1a 0d c2 ae 5a 4b 6e dc 7a 96 cb 30 6c 66 e1 ec a7 59 e5 65 0d c2 42 6d 8e 67 30 ba ef 24 d8 Data Ascii: NhQHsE0bLSM@\pm+)id]b<UpgQ2jHN+vPUHx(M9C`onVDU6tWB2o,1xZl]p[(lVi 6V%:;$l2Eu2X}jEOf=QNZKnz0lfYeBmg0$
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: af 9d 14 01 97 41 0d 09 cd 18 a9 19 85 1a ec 68 b0 04 02 3b 18 55 36 58 c0 d6 cd 13 a5 6b 05 d0 3c 77 a0 d0 c7 02 45 46 e5 3d a9 e1 e1 d7 1a 0f e1 0b 45 2f 1b bb a8 99 3b dc fa d1 aa ba ee 34 0d e0 98 fb d5 c3 9a b2 b0 32 06 00 16 9a 03 5c 45 eb c7 05 69 35 86 b7 a8 0e 1f 54 23 6b 63 ae 91 41 71 ae 34 39 8a a7 59 23 73 9c 48 18 9f b2 16 38 76 57 ea a5 b0 b6 b7 81 a0 08 b9 3c d2 bc 57 46 3a b1 3c 6e 77 55 b6 39 64 81 c2 23 8f e4 6e 56 3b 1b ed 4e c4 16 c4 33 f1 50 c1 13 26 92 eb 40 02 80 27 47 a5 91 f4 f8 45 79 ab 33 b0 a7 8a 29 d0 03 5a 23 db 77 98 a7 59 8f a3 e9 bc 7e ca 37 60 de 2b 44 c0 2a 70 01 5a 31 a9 f1 4d 85 ef 8e 47 8c 9a a2 59 a8 c5 1a 38 2b 33 85 c6 02 e1 92 74 51 36 bc 4a 75 6e 52 f1 a2 16 97 3a a3 46 06 1b d4 12 06 cd 15 40 6b 43 4b 73 55 c0 Data Ascii: Ah;U6Xk<wEF=E/;42\Ei5T#kcAq49Y#sH8vW<WF:<nwU9d#nV;N3P&@'GEy3)Z#wY~7`+D*pZ1MGY8+3tQ6JunR:F@kCKsU
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 83 2e cf ea 1b ed 0b e2 7e be 22 06 70 52 26 d4 1a 83 3f 73 99 6f c3 69 f4 27 e7 f2 41 83 ca fe 27 e9 e7 f8 f3 d1 5d 2f ad 4d a3 bc a8 30 4c 65 ab 99 62 d7 78 ce ed 56 ed 6b c4 f2 5c 1a 3d e0 9b 8d 0a b6 b0 63 19 77 79 fb 4b cb 1f 94 dc 56 a6 f8 58 92 14 d6 2e b0 f1 5c 16 f6 96 4e 96 17 06 a8 dc 68 a9 c1 20 0d 04 19 34 81 51 e9 9f 64 de 68 4c cb eb 69 35 8c da 28 ad 30 9e 62 b1 58 10 7a 4b 9b ed 7a 91 34 6d 1d 2e df ee 5a 39 52 cb 1a 5b d1 2c ec 0f 66 32 f8 fa 25 b6 13 15 64 66 3c 8f 98 9a 70 df c4 66 de 00 a7 7d 3a 30 3b cd 3a 1a cb 95 2a 11 b8 3a 10 65 e3 35 a7 f0 5f 53 4f 94 e0 f7 a4 ec f5 98 18 75 8c 1d 84 fd 1d a7 e1 e5 8b fa ef 3e df e9 1f b2 8b d0 23 d2 a8 83 71 04 47 47 a6 97 9e 8f 3d 26 26 af 8f 45 fc 57 d4 d3 e5 f5 67 c1 3e 66 0f 46 26 83 95 02 Data Ascii: .~"pR&?soi'A']/M0LebxVk\=cwyKVX.\Nh 4QdhLi5(0bXzKz4m.Z9R[,f2%df<pf}:0;:*:e5_SOu>#qGG=&&EWg>fF&
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 38 b5 45 bd 44 29 a9 2b b4 ae bf bf e6 26 91 60 ed 96 5d 57 36 3d 9c 5c 4b 8d 15 7b 4c ee 88 5e 63 95 87 4c 77 99 11 0d 6f f1 2b 51 c9 fd 6f 0a 1d 99 24 b2 9f 15 bc ac f5 98 15 e0 71 6a da a2 54 70 57 36 69 34 82 2e 96 80 27 07 b7 af 8a 87 ce 71 47 6b b9 65 a3 01 ac e6 08 96 1a 57 56 38 99 39 ac 4a 92 01 ba 66 4d c8 72 25 74 b8 31 a0 f7 95 c2 9e 59 3b c0 9e 52 5d d7 b7 18 88 23 ae 86 ca 97 b9 f0 44 98 bf ac 6c d4 55 4c 1b d7 88 e4 57 4b d7 c2 15 c2 09 d2 b6 8e 10 07 0a 73 ae d0 3b c2 65 b4 11 33 96 0e f3 3e 29 57 4d 63 d6 b0 3d a5 3a 5f bc 19 5a f9 9a 09 66 be bd a6 4b 45 68 66 fb fb cc 21 61 8b 9b 1a 03 b9 9a 17 55 d2 b1 52 94 86 06 4e 25 62 a3 26 80 57 cc ba 65 f4 86 ac 60 79 26 bc 60 bb d9 c4 c2 1e 5d 3d 65 57 1d 1c e6 53 15 94 83 42 f5 f3 00 ae de 2d Data Ascii: 8ED)+&`]W6=\K{L^cLwo+Qo$qjTpW6i4.'qGkeWV89JfMr%t1Y;R]#DlULWKs;e3>)WMc=:_ZfKEhf!aURN%b&We`y&`]=eWSB-
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: e4 6e e8 5d e0 6c a1 e8 25 6b 52 03 7b 37 8d 18 8e a7 71 99 60 b1 bf 11 88 8d de 4a cd c5 a3 b5 b3 e6 5d dc 6f 32 4b bb b1 08 e6 36 78 da 32 73 39 8c 3b bf a9 79 72 37 32 6e 89 95 35 8d f8 ed 1a 84 7b 89 89 ae aa e4 c4 ba 54 52 0f 07 13 2b a9 ba a9 9c 6d 29 5a 97 d9 85 f3 70 40 b5 82 67 d5 9e b1 e5 77 d0 9a 58 90 14 06 d0 cb c0 55 83 1a 39 bd 60 c5 82 14 6e f4 94 0f 61 ab ee 71 fb 50 7a f3 80 cc 1a 10 df 52 db ad 10 1c 63 23 96 3a 41 31 a3 7b e7 d5 d0 74 18 09 ba a6 e1 16 b7 2f 68 ae f0 39 92 1c bc 4c c8 b1 bb 20 9b 40 ef 23 85 5e f3 6b 55 6a fd a4 b5 4d 70 a8 82 b9 f9 c5 b0 6d 19 7f 70 f1 6d 73 03 2a 82 6f d5 cf 03 28 e2 65 b8 84 28 0c ed 55 17 30 ae 65 5b 2c d5 6b 3f b8 74 72 c7 cf 6b b3 50 0b 41 be d7 e6 b5 82 55 47 88 96 00 f2 61 8e bc f3 47 b4 49 a6 Data Ascii: n]l%kR{7q`J]o2K6x2s9;yr72n5{TR+m)Zp@gwXU9`naqPzRc#:A1{t/h9L @#^kUjMpmpms*o(e(U0e[,k?trkPAUGaGI
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 8f 84 b0 de d7 3e 0c 01 f3 64 e2 60 e5 d2 5e 99 f0 97 fd 4e f9 68 46 e0 f9 22 af d9 cc 79 04 7a ca 4f f6 58 5b db 5e ea 1b 41 3d b1 a0 42 ad d7 fb 31 90 2d 7c 42 92 c8 bb e8 81 43 c5 2e 5f 31 e2 a0 6f 9b 01 e1 2c 38 82 23 20 06 99 06 d0 19 51 b7 18 52 59 a4 04 4a a2 de 4f 0c 75 ba dd b8 7d 65 4d a2 09 7d a8 5b 58 a5 01 33 2c 17 c9 47 00 0e 04 77 83 56 1c 5e 12 85 09 45 9a 84 52 86 e8 eb bd 6d 97 ff 00 ed 9e 98 85 14 d5 da 88 be 3b c0 d6 1c da d4 95 5d 8c 25 f6 4a fd ae 25 7c 74 f2 89 cd a3 3a 04 e3 67 f0 23 03 f8 94 30 8b ea 55 a5 80 bf 43 f8 2c 68 d9 be d2 11 10 6c b5 3f ee d8 cc 1d 4b da 1d 10 7c 52 27 49 2a 3c b4 d2 9d 57 c3 16 1d 54 f4 b6 34 d1 ed f0 bf d8 0a d7 cb e9 19 bd 3d 78 42 5a 6d f3 45 18 15 bf 95 44 d2 97 46 75 75 15 b2 b5 2d b6 3f c3 ae 3f Data Ascii: >d`^NhF"yzOX[^A=B1-\|BC._1o,8# QRYJOu}eM}[X3,GwV^ERm;]%J%\|t:g#0UC,hl?K\|R'I*<WT4=xBZmEDFuu-??
2024-12-17 10:52:05 UTC	1369	IN	Data Raw: 04 7c 23 48 c4 e3 22 5d c8 d1 d1 f3 12 b2 cb 31 f3 d1 02 85 f0 5a 51 c0 ea 6b 03 ce 9b 5f 08 05 54 0b ce 79 1d 4e 15 d3 0d 34 7c fb 22 a5 82 f9 3a 33 e6 34 56 16 72 63 0a b1 78 ad 7a 59 f7 21 0d 4a a8 8d 0b 37 c1 95 e0 0b 76 08 b6 da 57 a3 2a 2a 01 4d 90 7c f5 72 96 ea dd 45 82 f9 3a 8d e8 7c 71 70 7e 27 0a 3c 6d a5 90 6c d0 bb a3 d2 fb 12 51 39 d0 55 cb 4b e2 e3 52 4a b9 0c 5d 38 78 94 69 56 81 14 b8 17 34 d5 cc 21 ef b4 cf 7e 99 62 f6 f7 10 d1 15 1e d5 e6 3c 13 72 4f 00 a7 e9 b1 ab ba 9a 32 83 bf af 8b 96 80 5a e1 74 9d b5 7c 44 8a 05 5c 6b 88 d8 ee 00 15 5e ce d0 c8 08 3b 7d 93 75 e2 b2 f1 a5 71 1e 36 4d 42 52 7c 71 17 d0 82 a1 6d e8 9d 31 cd 7c 3d 0e 1b cd a5 99 3c 84 a3 97 14 39 1a d0 b2 e2 92 cb 7c 0b f8 22 92 80 05 b5 57 b1 34 21 2c 9d 23 95 c0 be Data Ascii: \|#H"]1ZQk_TyN4\|":34VrcxzY!J7vW**M\|rE:\|qp~'<mlQ9UKRJ]8xiV4!~b<rO2Zt\|D\k^;}uq6MBR\|qm1\|=<9\|"W4!,#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49902	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	384	OUT	GET /movies/12320562862-poster-Bigfoot-vs-Krampus.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	921	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:05 GMT Content-Type: image/jpeg Content-Length: 21006 Connection: close Last-Modified: Mon, 16 Dec 2024 04:38:55 GMT ETag: "520e-6295bc21fd0d0" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3380 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9q7gZMLYYfC7O4Um0MSk1nsNPQH%2F%2F2kQhRhc%2Bg63Uo4eBoGpz8wU%2F4jkPYz9elWxhUKV9BrzIklg%2FIpXCGYWlVjB88V8%2FQnvi8l8D3jx299dS3jvQ67FZ14OMhYz84A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c98f80e4315-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2366&min_rtt=2363&rtt_var=892&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=962&delivery_rate=1223292&cwnd=218&unsent_bytes=0&cid=c57e5e4d48a1603e&ts=448&x=0"
2024-12-17 10:52:06 UTC	448	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c2 00 11 08 01 4a 00 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 76 5b 16 9d 56 c4 71 63 98 a6 Data Ascii: JFIF.$ $.5--5@99@QMQjj.$ $.5--5@99@QMQjjJ"7v[Vqc
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 04 a3 dc 40 ef a2 e5 7e 7f 06 c6 0f d7 2c fb 3a 63 ca d6 95 60 e6 14 e9 4c 0f c3 66 41 5a 11 91 df cb f2 97 e7 9a 97 09 7c 50 2c 75 06 0a 8a cf aa 5a a7 59 c6 8a 6d 79 22 27 c4 5d 4d 1d 4b df 17 3e a7 c1 4f d8 dc 97 d5 1f 2a d8 1a 46 cc da 62 86 04 0a 5d 3f cc 8d 9a 96 3d fa 71 75 c9 b1 63 53 aa 69 0e 2b f1 2b ad ab 31 c7 a1 f9 b8 0d b0 12 2b 96 53 6c b9 b4 96 79 6a 04 65 45 70 cd 2f 89 fc d1 3e 83 b3 fc f1 a3 30 ae b6 2c e8 54 9f 73 fc b7 97 1a 90 37 4d b8 ce 55 7b 50 ba a3 b5 da 25 d0 82 0b 26 2c d4 0b de 22 34 5e f9 26 7b 69 54 94 96 16 13 8b 44 4d 4c 70 80 07 b2 51 8e 53 73 a2 a5 fe 7f 62 ea 45 6f a0 91 57 82 84 07 79 d5 de 77 80 eb 22 8b ea 1b ad ad 55 19 a5 71 e4 86 3c 57 f2 c1 8e b3 15 a3 b7 af 73 b8 6b 33 0e 4d 7c ee de bf e7 60 fa 6e 73 da 78 ce Data Ascii: @~,:c`LfAZ\|P,uZYmy"']MK>O*Fb]?=qucSi++1+SlyjeEp/>0,Ts7MU{P%&,"4^&{iTDMLpQSsbEoWyw"Uq<Wsk3M\|`nsx
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: fe 27 e4 52 fc 8a 4f 35 df f4 06 86 6b b5 7f 2c 4d ec d3 e2 e7 39 cd 5f 6d f9 bc 55 bb 9f dd b5 8f f5 8f 37 d2 bf e9 ba f6 60 ea 6f 7d 88 fb ea ee 71 43 a6 25 dd 76 92 f8 f9 73 82 63 8b 86 c4 9f ff c4 00 2e 10 00 02 02 02 02 01 03 02 05 04 03 01 00 00 00 00 02 03 01 04 00 11 05 12 13 14 21 22 06 31 10 15 23 32 41 24 33 34 42 16 20 51 52 ff da 00 08 01 01 00 01 08 01 88 ce bf 81 0e 6b 35 9d 67 04 77 81 11 85 f8 44 4c e4 27 3a 64 06 78 f5 9a de 48 e1 7b 61 67 be 7b e7 be 7b e4 44 e7 be 0c 64 60 8f be 18 eb 3a ce f2 7e d9 01 33 81 59 e5 3f 10 e1 f9 26 7d a6 89 2f f7 4a e2 30 fe f9 ac 11 c5 c7 b6 75 d6 08 7c b1 a3 b8 f6 18 9d 61 14 61 e4 e6 b3 ae 40 fb e0 d6 de 4d 78 1c f0 84 e3 3c 23 ec 1b 8d ce bc 1d 70 53 3b 8d b9 18 51 ac aa df 0b c1 99 67 eb 0e 51 ab ea Data Ascii: 'RO5k,M9_mU7`o}qC%vsc.!"1#2A$34B QRk5gwDL':dxH{ag{{Dd`:~3Y?&}/J0u\|aa@Mx<#pS;QgQ
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 9c 42 ca 70 42 57 1b 3a 07 fa 3b c9 84 1c e2 e5 21 f1 8e 7a e0 2c 23 7c b2 bb 24 f0 e9 75 20 11 77 10 e4 e9 a4 3c 4d 5f 40 e0 5d f5 02 dd 32 08 0e fd a7 21 44 91 13 95 d8 38 82 e9 5a c7 a9 a4 5d b8 c3 10 12 eb 2f 5c 17 88 8d 3b 5a 3a a2 b7 49 e9 8c 2f 18 97 52 b7 fb 64 06 74 3e ef 6f eb 30 45 ab 82 8f 73 a8 3b c0 80 64 6c 60 31 61 95 7d a2 30 67 db 0f bd 53 87 28 5a 38 6e 18 9c fa 8d bb 1a fa b2 b3 bb 0d eb c7 d7 79 b9 3b ae 2e 0e 3b cf 61 6f 95 c9 1a b9 45 a1 e8 f2 a4 6c 82 bd e1 b7 6d 59 3d b2 83 a4 5e a2 ce 1a c8 c1 9a a7 8e 78 c5 c8 4c 82 92 db 2b 33 81 9e f1 8a 4f eb 81 e3 e2 3c e1 30 4e 84 b7 a4 ba d2 14 20 c9 b2 89 ed 13 1f bc 20 f2 63 78 6a 1f e0 6d b4 75 06 bb 88 2c aa 7d e6 3a 57 8d c0 77 b3 60 6c dc f0 ab bf b1 46 1d ea 75 8d 62 76 a7 ce c0 71 Data Ascii: BpBW:;!z,#\|$u w<M_@]2!D8Z]/\;Z:I/Rdt>o0Es;dl`1a}0gS(Z8ny;.;aoElmY=^xL+3O<0N cxjmu,}:Ww`lFubvq
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: c0 31 69 18 de 44 e2 e6 71 26 63 05 a4 85 b2 d0 41 9c 20 be 25 62 0f df 01 ed 1d 4c 1f 24 d3 10 89 55 8b 13 ae b0 f3 38 5c 3e 95 18 46 a4 d8 32 15 67 a8 3d d4 9a 1b 1e 67 90 03 b2 31 c7 5d 7b d2 4f 20 e5 d3 42 87 68 57 10 d3 52 d9 1c 5f d5 55 ac fc 2c 8c 44 c4 4c 30 80 3e f6 39 08 fb 65 cb 3e 6e d0 37 e7 b0 ea 2e 4c cb 30 a0 e2 77 2d 13 22 de 6a 63 3d e7 00 27 06 31 44 51 31 10 14 e1 7c 43 d9 3a c8 95 f6 98 c5 80 cc 60 55 39 9c 81 b0 a3 c2 62 89 25 13 c7 f9 39 14 56 aa ca e6 4a b3 e8 8b d1 db 0b d6 3b 3e fc d5 bf 09 73 b9 9f 5f 40 13 3c 5d 7b c1 69 30 fa 9c 45 7b 0a f2 72 20 f9 1e d9 f4 b7 d5 a3 4c fd 1d ce 42 ca fa c9 0b 2d 19 7b 63 1d 01 ed 96 ac 14 ee 31 d2 0b 5e ca db 84 e3 b6 7b 4c 7b 4a a7 05 73 13 9d 33 53 19 c7 d2 93 8f 95 96 97 4b 2b c6 08 f8 96 Data Ascii: 1iDq&cA %bL$U8\>F2g=g1]{O BhWR_U,DL0>9e>n7.L0w-"jc='1DQ1\|C:`U9b%9VJ;>s_@<]{i0E{r LB-{c1^{L{Js3SK+
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 79 c8 db 7a 1e 1d 38 9d 95 b2 29 ba 44 2b 5e ae 46 d2 73 9c 5a c0 ec cc 15 d8 f1 8a 7a 5e 09 f1 1e 22 cb 53 db a4 41 0a 97 97 2f bd db 59 44 cc 4e e2 64 8c b7 9c 7d 43 59 4b dd c9 58 f5 07 d8 72 35 f8 6e 72 22 4a 75 1c 47 b3 d9 bf 2c 2b c6 27 c9 a6 5b 58 b5 c3 44 f9 9b 19 cb 47 5a 8a 8c e2 23 fa 5d e3 6b d7 75 b6 43 39 2a 35 d2 88 20 e1 a6 7c 2d cb af 44 0f 53 e1 bf c8 3c b7 13 09 44 4b 06 46 b3 a2 78 81 89 b2 59 7e 7d 91 8f d4 a5 d9 fc e0 8c 12 42 31 9f dc 2c 8d 6f 17 6e 10 3a 55 8b 0f 66 bb ef e1 af c2 33 b8 cc 44 67 71 19 c8 fd db ce 23 af 95 b9 61 24 d2 4e ad ea 2b 3e 73 86 fe fb 33 9a fe c2 f3 88 3f e9 b5 1e 03 f5 d2 dc e6 7f c5 8c e2 27 48 2c e5 4c a2 61 51 c5 18 8d 98 89 b0 06 d8 54 45 a2 10 aa d9 9e 20 e2 2d ea 6d 20 9b e3 ea f6 0c 26 c1 4f f3 88 Data Ascii: yz8)D+^FsZz^"SA/YDNd}CYKXr5nr"JuG,+'[XDGZ#]kuC9*5 \|-DS<DKFxY~}B1,on:Uf3Dgq#a$N+>s3?'H,LaQTE -m &O
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: e6 75 5e 71 32 78 a7 10 0a 25 64 9f 0c 77 f9 92 26 23 50 80 73 66 1c 39 15 4c 07 58 1f f6 a7 58 e8 2c 9d 9f 88 69 28 78 ad 29 c4 f2 94 0d 94 a7 12 56 51 f0 85 60 9e 08 e4 ac 8a c9 a0 9f fd 47 dd 53 6c 87 8d ec a1 bc 57 8b 70 5f 3b dd 31 af 31 76 83 18 4e 52 bb 5b 5e fa 11 88 81 60 73 9e 8a ed 7d c2 39 14 eb 29 ca 6d c4 26 f9 32 e2 13 a6 4e 2f f9 2c e3 10 4d 99 cf 90 4d b6 1b 72 58 71 68 86 26 f9 b8 ab a3 10 01 cf 61 44 73 1f 0c 86 62 87 0d 2f b0 ab f7 80 01 c2 ce 4f 34 9f 4e 96 28 8f 37 00 79 26 bb 16 33 83 84 b7 78 92 aa 32 af 78 c7 b9 98 4d c3 79 ae d0 f0 fc 3b ec c9 ae 1c 10 0d a6 cb b4 0b 9c 27 8f 35 44 b8 c6 bc 93 e0 68 06 41 68 e0 a6 58 e3 f2 94 20 cb be 47 78 26 c9 07 74 f0 42 cb 1e 47 a2 f0 8f ba 18 9a 44 a0 5d 2e 0d 00 67 75 75 62 7c a5 05 9a 18 Data Ascii: u^q2x%dw&#Psf9LXX,i(x)VQ`GSlWp_;11vNR[^`s}9)m&2N/,MMrXqh&aDsb/O4N(7y&3x2xMy;'5DhAhX Gx&tBGD].guub\|
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 71 8e 88 c6 52 af 85 de d7 40 13 07 3b fc 95 20 64 74 4d 02 db ba fb aa 6d 6f 7d a8 cd df 25 85 e4 d8 6e d9 3c 02 18 0d c6 ec 72 3c 91 35 43 9e 4c 36 60 19 e2 9b 89 9e 66 0d 53 4b 4e ad 22 e3 e1 37 4f c4 4a 2e 03 1d c8 10 73 84 2f 24 09 33 00 23 cc 7b aa 50 f6 ce 37 ea e2 4f d8 7c 06 31 b4 a7 c8 02 79 36 7e c8 63 8c 8e 9d 61 14 fd 13 1b 66 c1 3a 9b cd d3 a2 f6 80 02 70 31 6c 70 00 8e 6b b4 33 7a 03 1c c9 74 9c f9 5a 17 6a a9 54 b8 e8 25 bc 30 b5 36 a1 63 c8 dc 8e 3c 39 a6 17 8a a1 c5 8d ab 60 3a 7f 24 f6 76 5e c4 c3 0c 16 33 6b 81 ce 55 66 54 75 41 88 18 86 36 2d ba 39 2e d7 d9 c9 a8 31 b8 bd cf 24 97 5f e4 80 a2 ff 00 57 94 ff 00 25 04 1d 76 43 42 39 23 00 c1 e7 6c d1 c4 08 5a 5b 60 f8 04 ca 88 ee c9 04 79 9c 4c 7c 86 9b 33 59 a1 28 11 d7 24 5a c3 dd be Data Ascii: qR@; dtMmo}%n<r<5CL6`fSKN"7OJ.s/$3#{P7O\|1y6~caf:p1lpk3ztZjT%06c<9`:$v^3kUfTuA6-9.1$_W%vCB9#lZ[`yL\|3Y($Z
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 3c b5 b6 6d 93 18 d1 e9 67 84 0e 4a 99 7d 3c 60 11 c4 6a 86 32 5c 70 83 f6 47 7a 93 71 f4 6e 56 5a ba f1 6f 96 c3 7d af c2 70 de d3 aa ed 4d 21 a6 5b bb 17 5d a9 ad 63 a6 5d 82 7e 8a bb 70 30 6e 9c 23 20 ab 09 a9 52 4e ee 67 8a 7b 64 81 88 e1 19 05 da 24 d3 3b 90 c0 2e aa 36 1e 0f 94 5d 56 60 6b 00 6c 61 19 2e d2 30 99 b6 01 22 53 c4 03 61 84 6a bb 50 6b aa ba 5f b8 0e bf d5 55 15 03 66 08 6c 66 b3 2b b5 48 d1 a5 b8 a1 55 1d de b8 44 7c d5 62 c2 dd 7a aa ed 73 8e eb 08 66 b3 99 5d ad ce 33 16 b2 31 8a c6 15 da c6 c0 8e 25 39 d2 df 64 e2 33 13 c4 22 a3 3d 83 3d 80 44 63 e6 48 56 c5 52 e3 66 58 56 58 d7 a9 38 06 f7 63 35 53 15 f8 af 52 e1 c1 67 05 6b 54 23 6c 25 7a 4a 24 4d 40 16 50 57 9b 35 7b 02 88 c2 1d c3 66 6b 70 0c b4 43 71 b6 9e 67 e0 2b 35 a3 50 b9 Data Ascii: <mgJ}<`j2\pGzqnVZo}pM![]c]~p0n# RNg{d$;.6]V`kla.0"SajPk_Uflf+HUD\|bzsf]31%9d3"==DcHVRfXVX8c5SRgkT#l%zJ$M@PW5{fkpCqg+5P
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 9b 68 2c ef 8a ad 8c 58 ce 0a e5 2b d0 ca 93 b2 20 a7 80 b1 f6 a5 45 34 b7 84 01 b5 0b 77 6a ea f9 12 be 88 5a 2f 6e dd 44 c1 16 9a 50 65 f7 17 d1 16 04 e9 15 33 92 2c bd 18 ad a9 e9 46 c6 28 51 b1 af 2c e5 b4 f1 14 95 be f0 7c b2 dd a3 cc 72 a2 0e 38 0d 21 00 38 00 1f ec 6a 2a 42 ae 62 8d 09 2b 7a 82 56 bc 64 71 a7 2c bf d3 c4 c2 22 2f e1 4a 6d 15 9d 30 3b 0e 28 f4 62 81 38 d1 ca b0 d0 7b 9d f4 c8 39 45 7c 87 b6 6d eb 40 55 fc 6d 69 33 e0 89 f4 52 0e a9 80 14 a8 ea cb 95 22 93 30 ee 5f a0 22 17 7e cf 11 3b 86 51 5c be 25 f4 45 07 ef 35 11 6d 03 69 c2 c8 15 2f a6 56 68 5f d4 b4 5c 25 c0 5f 30 59 0c 30 74 14 a7 95 71 28 39 b4 b5 a5 95 ee e1 d6 6a 6b 80 b4 17 36 78 85 e1 32 6c f8 3c 71 2f 81 69 a3 b0 60 40 3d 4b 1d 80 f0 cb 9e 63 34 c0 4d 2d c2 36 6c 60 1f Data Ascii: h,X+ E4wjZ/nDPe3,F(Q,\|r8!8j*Bb+zVdq,"/Jm0;(b8{9E\|m@Umi3R"0_"~;Q\%E5mi/Vh_\%_0Y0tq(9jk6x2l<q/i`@=Kc4M-6l`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49898	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	586	OUT	GET /loading.gif HTTP/1.1 Host: gomo.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gomo.to/movie/passengers Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	287	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:06 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Last-Modified: Sun, 18 Aug 2024 07:42:32 GMT ETag: "67c7-61ff055cadbeb" Accept-Ranges: bytes Content-Length: 26567 Vary: User-Agent Connection: close Content-Type: image/gif
2024-12-17 10:52:06 UTC	7905	IN	Data Raw: 47 49 46 38 39 61 80 00 80 00 f7 b5 00 4c 00 01 51 04 07 5c 06 02 6e 05 0a 55 12 10 7d 0c 0e 59 17 18 6f 12 0c 70 14 14 5d 1a 1b 8d 15 12 5f 23 23 7f 1b 17 8e 17 19 9f 13 15 9f 13 1b 75 22 1e 64 2d 2c 8f 23 21 83 27 26 af 1b 1e 9e 21 22 69 32 33 91 27 28 72 34 33 9f 2a 2b be 22 21 6c 3a 39 af 28 2c 75 3d 3e 9f 32 31 bd 2c 2e cd 28 29 6f 43 43 ce 29 24 85 3f 40 9f 3a 3a 93 3e 3b e1 27 2d 94 3f 41 bb 34 34 ad 38 39 cb 30 30 7b 48 47 75 4a 4b dd 2f 32 ad 3f 40 a0 43 43 f0 2c 30 86 4c 4d c9 39 3c 8d 4c 4a 7e 52 52 b8 42 42 7a 54 52 ec 34 35 85 52 50 a1 4a 4a ad 47 4a c7 40 42 ff 32 32 9e 4e 4c ff 32 38 b7 49 49 8a 56 57 85 58 58 ac 4d 4c 90 55 55 c5 46 45 95 54 57 7d 5b 5e fa 39 3d fb 3a 37 b7 4f 4c 85 5e 5c b7 50 52 f6 3f 42 82 62 63 93 5e 5e 8d 60 60 f1 46 Data Ascii: GIF89aLQ\nU}Yop]_##u"d-,#!'&!"i23'(r43*+"!l:9(,u=>21,.()oCC)$?@::>;'-?A448900{HGuJK/2?@CC,0LM9<LJ~RRBBzTR45RPJJGJ@B22NL28IIVWXXMLUUFETW}[^9=:7OL^\PR?Bbc^^``F
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 08 66 cc ba 84 66 e1 0c 32 8b d0 0e a0 41 77 20 9d 30 ed 69 cc 9a 04 b2 2e b0 47 60 ec d8 b3 69 17 d4 72 fb b4 9b 52 9a 76 e7 fe fc 3b b4 f0 81 92 8a 9f 26 26 94 e5 63 55 42 57 34 8f fd 5c e0 65 e9 8b 1b 08 ff 04 c2 f9 89 c0 03 db 9d 3f d7 0b 7e 71 af 52 6e 38 0b c4 93 1e b4 dd e7 80 da 2f 76 a2 fb b1 40 1a f5 49 d6 9d 40 c4 e9 a7 d6 05 a3 88 f2 d8 04 5e 05 48 d7 52 95 49 32 05 2b a6 08 55 4a 81 06 52 85 95 56 6f 01 e1 9b 83 61 05 31 10 1e 36 18 e1 d4 14 0e a4 e8 c0 18 16 7e 97 61 1a a5 a0 f1 57 1d a5 54 01 22 58 86 0d 24 c0 8e 02 18 31 1a 4a a2 e4 a0 a2 8a 58 0c c4 9e 81 27 f4 b7 95 40 b0 81 98 a3 40 3c f2 18 82 4c 42 0e a9 e2 14 a3 08 c4 4b 86 0a 68 32 8a 75 45 31 f0 a1 83 f7 41 19 a5 94 3f 66 84 a2 95 43 b2 32 50 09 19 02 52 ca 6a 46 99 c7 5c 80 c1 cd Data Ascii: ff2Aw 0i.G`irRv;&&cUBW4\e?~qRn8/v@I@^HRI2+UJRVoa16~aWT"X$1JX'@@<LBKh2uE1A?fC2PRjF\
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: e3 a9 7e e2 d6 00 10 b3 ab c7 9b 00 1e 4f af ce b9 3d 02 29 4a a1 6a 68 bf 39 16 c8 dd 6f 85 47 88 ed c2 7e 41 2b 4d 80 36 00 ba a0 15 1b 8c b7 d7 2e 64 c4 17 98 4d 58 1f 0c 24 04 ea 1e 77 a6 e7 9a 0a 1b 7c 7b 94 03 59 c3 17 a4 f0 85 a9 ea 5a dd f0 16 c8 70 5b 0d f0 8c e4 f9 d6 d6 6e b8 4c ba a0 dd 4a 13 20 e2 12 97 09 26 ba 40 6c 30 6f a0 0b c6 cd f8 53 30 41 88 37 74 c1 08 28 0a 37 42 17 de 40 88 90 d7 2d 20 00 21 f9 04 05 09 00 bb 00 2c 0d 00 0d 00 66 00 66 00 00 08 ff 00 77 09 1c 48 b0 a0 c1 83 08 13 86 ba 74 a8 4f 1b 35 10 fb 1c aa 14 2a a1 c5 8b 18 33 6a dc 38 30 54 9f 24 1a 42 8a 1c 19 32 49 9f 8a 1c 53 aa 5c 89 91 cf 07 92 30 49 7e 38 c4 b2 a6 4d 95 7c 62 ea 24 49 f3 a6 4f 9f 70 c2 84 81 d3 a9 94 d1 1a 3b 93 6a 58 62 b4 54 26 31 b6 b8 c8 89 f4 b3 Data Ascii: ~O=)Jjh9oG~A+M6.dMX$w\|{YZp[nLJ &@l0oS0A7t(7B@- !,ffwHtO5*3j80T$B2IS\0I~8M\|b$IOp;jXbT&1
2024-12-17 10:52:06 UTC	2662	IN	Data Raw: 1d 50 cb db 0a 90 55 14 21 15 29 49 33 42 54 84 ca 56 20 58 b5 6d 68 19 60 10 27 f0 a2 04 25 98 81 13 ea a0 09 a5 70 42 af bc 45 6d 06 a4 e9 8a e0 36 14 aa 1b 99 68 4f 5d 31 02 e5 2a b7 0e 02 d1 42 03 14 c0 de f6 b2 b7 01 5a 10 c8 6e b3 cb 5b 0f 0c c4 16 0e fd c3 49 94 a0 cf 20 0c a4 bc e6 b5 2d 20 4a a1 05 f7 1a b8 bd 5a 28 85 1f e8 9b 5d 12 70 a2 14 a3 c0 af 3f d5 7a 12 c3 76 b3 09 03 89 41 80 95 2b 10 09 1c f8 c0 17 18 05 27 18 9c dd 17 0c 84 0b f1 dc ac 4a 2c 8c cc 2a 0c 04 07 1b b6 ed 2c 4a a1 89 0f 7f 98 ac 39 20 31 6f 7b 20 90 52 f4 33 9c 3a 98 09 7f f7 39 0a 20 c4 d8 b6 59 28 05 20 6c 7c e0 34 98 56 c7 bc 65 85 ed 7e 4c 4b 0a cb 24 11 4d a0 01 41 8c 7c e4 d0 be a2 14 4e 60 b2 81 67 20 10 28 f3 16 0b 4a 39 85 2d b8 e0 5a b4 3c a1 ff cb cb 15 c8 05 Data Ascii: PU!)I3BTV Xmh`'%pBEm6hO]1BZn[I - JZ(]p?zvA+'J,,J9 1o{ R3:9 Y( l\|4Ve~LK$MA\|N`g (J9-Z<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49899	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	535	OUT	GET /dsPlayer/dropzone.js HTTP/1.1 Host: gomo.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gomo.to/movie/passengers Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	316	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:06 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Last-Modified: Sun, 02 Apr 2017 14:53:51 GMT ETag: "fb90-54c3035f5ddc0" Accept-Ranges: bytes Content-Length: 64400 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: application/javascript
2024-12-17 10:52:06 UTC	7876	IN	Data Raw: 0a 2f 2a 0a 20 2a 0a 20 2a 20 4d 6f 72 65 20 69 6e 66 6f 20 61 74 20 5b 77 77 77 2e 64 72 6f 70 7a 6f 6e 65 6a 73 2e 63 6f 6d 5d 28 68 74 74 70 3a 2f 2f 77 77 77 2e 64 72 6f 70 7a 6f 6e 65 6a 73 2e 63 6f 6d 29 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 2c 20 4d 61 74 69 61 73 20 4d 65 6e 6f 0a 20 2a 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f Data Ascii: /* * * More info at [www.dropzonejs.com](http://www.dropzonejs.com) * * Copyright (c) 2012, Matias Meno * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "So
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 20 3e 20 74 72 67 52 61 74 69 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 3d 20 66 69 6c 65 2e 68 65 69 67 68 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 3d 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 2a 20 74 72 67 52 61 74 69 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 3d 20 66 69 6c 65 2e 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 3d 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 2f 20 74 72 67 52 61 74 69 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 Data Ascii: > trgRatio) { info.srcHeight = file.height; info.srcWidth = info.srcHeight * trgRatio; } else { info.srcWidth = file.width; info.srcHeight = info.srcWidth / trgRatio; } }
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 73 6b 65 74 63 68 3a 74 79 70 65 3d 5c 22 4d 53 50 61 67 65 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 5c 22 4d 32 33 2e 35 2c 33 31 2e 38 34 33 31 34 35 38 20 4c 31 37 2e 35 38 35 32 34 31 39 2c 32 35 2e 39 32 38 33 38 37 37 20 43 31 36 2e 30 32 34 38 32 35 33 2c 32 34 2e 33 36 37 39 37 31 31 20 31 33 2e 34 39 31 30 32 39 34 2c 32 34 2e 33 36 36 38 33 35 20 31 31 2e 39 32 38 39 33 32 32 2c 32 35 2e 39 32 38 39 33 32 32 20 43 31 30 2e 33 37 30 30 31 33 36 2c 32 37 2e 34 38 37 38 35 30 38 20 31 30 2e 33 36 36 35 39 31 32 2c 33 30 2e 30 32 33 34 34 35 35 20 31 31 2e 39 32 38 33 38 37 37 2c 33 31 2e 35 38 35 32 34 31 39 20 4c 32 30 2e 34 31 34 37 35 38 31 2c 34 30 2e 30 37 31 36 31 32 33 20 43 32 30 Data Ascii: =\"evenodd\" sketch:type=\"MSPage\">\n <path d=\"M23.5,31.8431458 L17.5852419,25.9283877 C16.0248253,24.3679711 13.4910294,24.366835 11.9289322,25.9289322 C10.3700136,27.4878508 10.3665912,30.0234455 11.9283877,31.5852419 L20.4147581,40.0716123 C20
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 20 6e 75 6c 6c 29 20 7c 7c 20 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 46 69 6c 65 73 20 3e 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 68 69 64 64 65 6e 46 69 6c 65 49 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 75 6c 74 69 70 6c 65 22 2c 20 22 6d 75 6c 74 69 70 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 68 69 64 64 65 6e 46 69 6c 65 49 6e 70 75 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 64 7a 2d 68 69 64 64 65 6e 2d 69 6e 70 75 74 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 70 74 65 64 46 69 6c 65 73 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: null) \|\| _this.options.maxFiles > 1) { _this.hiddenFileInput.setAttribute("multiple", "multiple"); } _this.hiddenFileInput.className = "dz-hidden-input"; if (_this.options.acceptedFiles != null) {
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 5f 72 65 66 20 3d 20 5b 22 64 69 76 22 2c 20 22 66 6f 72 6d 22 5d 3b 0a 20 20 20 20 20 20 66 6f 72 20 28 5f 69 20 3d 20 30 2c 20 5f 6c 65 6e 20 3d 20 5f 72 65 66 2e 6c 65 6e 67 74 68 3b 20 5f 69 20 3c 20 5f 6c 65 6e 3b 20 5f 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 74 61 67 4e 61 6d 65 20 3d 20 5f 72 65 66 5b 5f 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 61 6c 6c 62 61 63 6b 20 3d 20 67 65 74 46 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 61 67 4e 61 6d 65 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: return el; } } }; _ref = ["div", "form"]; for (_i = 0, _len = _ref.length; _i < _len; _i++) { tagName = _ref[_i]; if (fallback = getFallback(this.element.getElementsByTagName(tagName))) {
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 63 63 65 70 74 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 5f 65 72 72 6f 72 50 72 6f 63 65 73 73 69 6e 67 28 5b 66 69 6c 65 5d 2c 20 65 72 72 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 63 63 65 70 74 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 51 75 65 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 65 6e 71 75 65 75 65 Data Ascii: turn function(error) { if (error) { file.accepted = false; _this._errorProcessing([file], error); } else { file.accepted = true; if (_this.options.autoQueue) { _this.enqueue
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 44 72 6f 70 7a 6f 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 6c 6f 61 64 46 69 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 69 6c 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 75 70 6c 6f 61 64 46 69 6c 65 73 28 5b 66 69 6c 65 5d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 44 72 6f 70 7a 6f 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 6c 6f 61 64 46 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 69 6c 65 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 66 69 6c 65 2c 20 66 6f 72 6d 44 61 74 61 2c 20 68 61 6e 64 Data Ascii: return option.apply(this, args); } return option; }; Dropzone.prototype.uploadFile = function(file) { return this.uploadFiles([file]); }; Dropzone.prototype.uploadFiles = function(files) { var file, formData, hand
2024-12-17 10:52:06 UTC	8000	IN	Data Raw: 70 7a 6f 6e 65 2c 20 64 72 6f 70 7a 6f 6e 65 73 2c 20 5f 69 2c 20 5f 6c 65 6e 2c 20 5f 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 20 7b 0a 20 20 20 20 20 20 64 72 6f 70 7a 6f 6e 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 64 72 6f 70 7a 6f 6e 65 22 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 64 72 6f 70 7a 6f 6e 65 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 63 68 65 63 6b 45 6c 65 6d 65 6e 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 2c 20 5f 69 2c 20 5f 6c 65 6e 2c 20 5f 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: pzone, dropzones, _i, _len, _results; if (document.querySelectorAll) { dropzones = document.querySelectorAll(".dropzone"); } else { dropzones = []; checkElements = function(elements) { var el, _i, _len, _results;
2024-12-17 10:52:06 UTC	524	IN	Data Raw: 26 26 20 72 6f 6f 74 2e 64 6f 53 63 72 6f 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 70 20 3d 20 21 77 69 6e 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 5f 65 72 72 6f 72 29 20 7b 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 6c 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 64 6f 63 5b 61 64 64 5d 28 70 72 65 20 2b 20 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 69 6e 69 74 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 64 6f 63 5b 61 64 64 5d 28 70 72 65 20 2b 20 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 69 6e 69 74 2c 20 66 Data Ascii: && root.doScroll) { try { top = !win.frameElement; } catch (_error) {} if (top) { poll(); } } doc[add](pre + "DOMContentLoaded", init, false); doc[add](pre + "readystatechange", init, f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49903	172.67.198.22	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:05 UTC	375	OUT	GET /movies/1231355644-poster-Passengers.jpg HTTP/1.1 Host: 123images.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	919	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:06 GMT Content-Type: image/jpeg Content-Length: 9292 Connection: close Last-Modified: Sat, 28 Jan 2023 17:23:56 GMT ETag: "244c-5f3563f2bae07" Vary: User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rYsljy0qw2cPDvXv%2BKTooJdrxE7l3%2B7Ug1epWEjqusD5dsY%2BV2fkV5%2BAiM%2FVMMKXYilM1yHuqFN5OFCbRXVpvpGmIhtT2vFJdjG%2Fb38v4aZCr5jLCrR%2BTqYkvBM6z20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c9b1ac87c9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1803&min_rtt=1798&rtt_var=685&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=953&delivery_rate=1585233&cwnd=213&unsent_bytes=0&cid=5e0f8f1188aae3ba&ts=450&x=0"
2024-12-17 10:52:06 UTC	450	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 0a 08 0a 08 0b 0b 09 0b 0a 0b 0b 0b 0e 10 0c 0a 0b 0d 13 17 15 10 14 0f 16 12 12 0e 16 12 0f 14 0f 0f 14 12 14 18 13 16 14 19 20 1a 1e 19 18 2b 21 1c 24 13 1c 1d 32 22 33 2a 37 25 22 30 01 06 0b 0a 0b 0d 0e 0b 0c 0c 0e 0e 0c 0d 10 0e 1d 14 0d 0c 22 14 15 17 0e 1e 08 17 0c 10 16 10 11 17 0b 10 13 14 0b 11 19 11 1e 09 19 0c 08 22 18 1d 14 0f 1d 10 0d 0c 0f 16 10 0b 14 15 23 16 18 ff c0 00 11 08 01 0c 00 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 96 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 07 01 08 10 00 02 01 03 03 02 04 03 07 03 03 04 03 01 00 00 01 02 03 00 04 11 05 12 21 31 41 13 22 51 71 06 32 61 14 23 42 52 81 91 a1 15 d1 d2 62 b1 c1 33 53 82 93 Data Ascii: JFIF +!$2"3*7%"0""#"!1A"Qq2a#BRb3S
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: af ad 3d f7 7a 12 5b 92 0f 5f a6 68 64 f2 c7 b8 e5 c1 65 f2 e4 76 3d 30 3b 66 80 62 56 56 bd b8 30 5a c8 e4 8d ec 40 1e e6 aa fc 34 8b 3e ad 24 cc cb 80 3b d0 cd 43 c5 b8 b8 8c 13 84 57 0b 1a 8f 53 96 cb 7b 01 9a ad 05 b5 da dc 3f 80 ca 37 b6 7a e0 e0 00 31 53 b0 f5 69 f0 76 c7 00 0e 0d 50 79 3b 57 39 53 f1 04 0c 4c 33 3e dc 7c a4 e6 8c 58 ea 57 2e e2 3b c5 60 c4 64 1a 06 c6 c5 1a 19 9b 9a aa 4f 5c d3 99 89 35 03 30 19 a5 59 a4 61 e4 9a a9 2a aa f2 70 05 32 ee e8 41 13 30 eb e9 df 35 86 bc ba bd bc 73 92 ea a7 e5 1d a9 89 58 99 4a 8d 15 c3 db 80 d9 75 3e 94 1a 72 8c 37 02 31 54 a1 d2 ef 24 01 99 c2 8a b0 da 6c b0 8f 2b a9 fa 1a 6e 3c 99 ed be c5 19 7e 9d 2a a3 54 d2 99 23 62 08 18 fa 1c d4 39 dc 01 ab 17 64 10 b8 4b 86 43 d0 8c 8a d1 41 26 00 3d 78 c5 66 Data Ascii: =z[_hdev=0;fbVV0Z@4>$;CWS{?7z1SivPy;W9SL3>\|XW.;`dO\50Yap2A05sXJu>r71T$l+n<~T#b9dKCA&=xf
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 88 e5 a5 cc 93 88 d4 15 1d 54 0e a5 7a 66 8a 43 09 57 60 3f 0a e1 45 49 25 b4 51 df c7 20 0d 86 5e 48 1f 87 ad 58 8a 65 92 46 48 80 1e a0 72 c4 7d 4d 73 e8 df 64 d1 c6 a8 aa ee 39 41 e4 cf a9 ea 6a 95 d3 16 24 9f d0 77 a2 72 98 92 3d cc c0 00 39 f4 1e e4 d6 47 50 be 0f 98 ed fb f1 b8 75 3e de 95 52 2a 0a dd 81 35 3b 86 77 f0 62 c9 62 71 81 d4 9a 52 81 6f 3c 76 80 e5 a1 55 37 18 ff 00 bc 40 ca ff 00 e1 d3 dc b5 2b 5d 96 8f 3d fd ce 19 2d 86 20 1f 9e 73 fe ea 9f ce 28 15 9c cd 25 db bb 92 5a 56 32 12 7d 49 cd 05 60 dd 1e 4e 83 61 86 15 a0 8d 4e 3a 50 1d 2f 1c 0a d4 0c 01 4b 43 e5 12 35 5f 36 6a e2 ed 09 9a 1d 2c bb 4e 05 5a b4 f3 c5 97 3f ad 50 12 58 25 70 19 72 3a d6 3b 5a 07 c1 93 e8 0d 6c 12 ef 4d 17 1e 02 4f 04 93 81 96 83 78 df 8f 5d b9 cd 65 35 b9 a2 Data Ascii: TzfCW`?EI%Q ^HXeFHr}Msd9Aj$wr=9GPu>R*5;wbbqRo<vU7@+]=- s(%ZV2}I`NaN:P/KC5_6j,NZ?PX%pr:;ZlMOx]e5
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 0f 85 0a 3d 68 6c db a0 6e fd 3d 28 50 4e fd c7 5a 33 68 b9 03 b8 a4 96 c2 48 9b 18 15 e8 68 e5 b7 98 06 5f 98 75 14 29 1f 60 c3 0d cb fc d1 08 03 2b 07 88 e5 7b 8a ba 14 c3 c8 41 19 fa 73 4a a0 59 32 32 3f 51 4a 9e 20 0a 97 da fd d5 d6 cb 7d 22 f5 3f 3d cd d4 4f 8f 64 4d 81 68 8c 96 17 ab 0b dc 4b 0d d4 b3 70 33 b1 8b 13 f4 00 76 ae ad bd a9 ad 21 51 b8 e4 e3 b2 82 4f ec 01 35 ab 6d 79 17 b8 70 cb a4 d5 9a 26 2b a7 df f3 d3 ee 5c 93 ef 84 aa 7a 65 96 a3 7f f7 17 56 3a 8d ac 99 6f 02 76 81 c0 57 1c 8e 4a 57 7c 4b 99 fc 45 5f 08 aa ba 06 2e 73 c1 e7 cb f2 e3 f7 3d e9 7d ae ea 44 60 60 2a ea 10 84 cf 0d b9 b6 9c 36 3f 08 e4 f1 43 b4 bc 85 ba fc 18 dd 0d af c5 a0 5b eb 59 22 bd b2 3b 1c ec 3b 24 5f cc 87 1c 86 15 cf 7e 27 d2 af d7 53 9d ad 2c 6e e5 8a 53 e2 Data Ascii: =hln=(PNZ3hHh_u)`+{AsJY22?QJ }"?=OdMhKp3v!QO5myp&+\zeV:ovWJW\|KE_.s=}D``*6?C[Y";;$_~'S,nS
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 39 28 90 dd 0b a3 09 27 f3 78 b6 eb 18 f7 26 ad 6a b6 70 5e ea ba 64 17 50 09 ad 64 b5 d4 23 ba f4 1b 85 b6 dc 91 f2 b7 19 5e e0 ad 55 97 59 08 fd a1 7f a9 be 9e 55 84 a9 6c 97 a5 ff 00 0e c6 91 e1 0b eb 9c a5 53 b9 d4 9a 3b df b0 d8 59 cd a8 de 22 09 ae 23 8d 95 23 86 36 c8 43 34 92 10 a0 be 0e d5 19 62 14 9a a3 a3 c1 ab da fc 47 72 ba 9e e9 e1 87 4f 8a 0b 1d 48 f5 9e 31 34 8e 3c 5e de 2a 07 01 ff 00 37 cf 4e 33 7f 45 d5 b5 47 bb 4b 91 63 ab b2 5c 5b ea 30 46 d2 f8 52 88 96 dd a1 99 62 47 74 c0 40 d1 b1 5d a7 73 0a 96 4a 41 8b 59 e5 b9 89 9a 7b 4b 9b 09 63 73 14 90 4f 83 92 00 6d f1 3c 6c c9 22 10 7a af a1 15 5a 4b bd 55 26 74 4d 1e 79 a2 07 6a 5c 89 e2 55 2b f9 c2 b3 07 aa 7a 04 f7 b3 4d 7e d2 cf 7d 7b 62 a6 11 a6 dc df 46 22 77 3b 58 cd 84 11 42 e5 01 Data Ascii: 9('x&jp^dPd#^UYUlS;Y"##6C4bGrOH14<^*7N3EGKc\[0FRbGt@]sJAY{KcsOm<l"zZKU&tMyj\U+zM~}{bF"w;XB
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: d9 af 4d c5 b8 50 c5 fc ad d0 d0 d8 3c 5d ac e8 0b 80 00 61 b1 78 1d 5b 82 7d 32 2b d6 28 fb de 12 c9 12 9c 88 d9 46 41 c0 63 b7 fe 2a 59 02 26 e6 d8 12 0b 8c a9 20 fb 8e b5 e8 b8 b6 24 8d e0 60 65 b3 c6 06 40 ef 43 41 27 ef c6 7c 3d c0 6c d8 37 64 e5 89 eb dc 2d 30 ba 88 42 79 83 bb 63 79 41 d3 f2 9e 7d 48 fd aa 59 02 e2 68 0e 71 22 1c 72 79 ed 4c 6b 8b 64 c6 e9 17 9f 4e 68 63 2b 24 c6 2d dc 83 b1 b0 83 6e 7f b5 7a ac 09 97 6f 3e 1e 4a ee 41 d3 81 81 52 c8 12 37 36 c0 80 5c 02 d8 db f5 ce 08 ff 00 7a 9e 86 2d cd ba 96 13 c4 5d 83 01 16 d4 03 6a f6 1d 68 9d 59 62 a5 4a 95 59 05 4c 96 35 9a 19 22 7c 85 91 4a 92 38 23 ea a4 74 22 ac d2 a8 50 36 2b 7b 48 0a 32 de 6c f0 80 5d 8d 20 cf 03 1e 6c b6 79 a7 cf fd 3e e7 60 6d 46 18 8a e7 02 39 54 13 9c 75 f3 76 c7 Data Ascii: MP<]ax[}2+(FAc*Y& $`e@CA'\|=l7d-0BycyA}HYhq"ryLkdNhc+$-nzo>JAR76\z-]jhYbJYL5"\|J8#t"P6+{H2l] ly>`mF9Tuv
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 8d 9e 25 4e 55 51 00 35 a7 d3 09 2d 27 d0 0a 38 f2 54 95 41 86 c1 a5 4d 14 ab 41 8c 65 7a 29 b4 87 5a 21 46 3a e0 ec ba 97 b7 9c e6 8b 7c 3d b4 5b de 7a 99 46 0f d3 14 17 54 cc 5a 8c 8a 7a 49 e6 5f da ae fc 33 38 66 bc 8b f1 2e c6 23 f7 15 8e 18 95 1d 6d 45 70 52 f4 8a 97 83 ef a4 0d d7 26 b3 f2 5a 26 ec 91 e6 27 71 26 b4 fa aa f8 77 59 ec d4 3a 44 ca d6 49 61 b1 f0 ca 40 93 68 ac b9 70 0e 68 85 a4 09 1f 44 00 b6 33 53 47 95 f6 ab 21 b8 ed ef 51 31 f9 2b 4b 17 65 e4 1e e7 f7 aa 17 6f e1 c5 8c 29 62 08 5e 28 b3 fc bc 75 f5 a0 93 79 98 b1 3f 41 4b 94 82 48 6e 93 1f df 0a d8 49 93 16 3e 95 94 d3 c8 5b af 41 5a 69 d8 f8 2c 7a 71 57 1e e0 c9 66 26 55 d3 75 c3 30 19 21 a8 92 0d ea 3b 1e f8 a1 f1 38 f1 5f de 8a c7 c9 18 a1 4c 36 8f 44 4e c0 29 c3 80 73 86 a7 3d Data Ascii: %NUQ5-'8TAMAez)Z!F:\|=[zFTZzI_38f.#mEpR&Z&'q&wY:DIa@hphD3SG!Q1+Keo)b^(uy?AKHnI>[AZi,zqWf&Uu0!;8_L6DN)s=
2024-12-17 10:52:06 UTC	628	IN	Data Raw: 63 ae 2a f5 b5 db 4a 9d 1b b6 e6 f4 f5 15 9d b5 bd b7 9e 52 51 5d c3 12 14 ed 20 7e e4 51 38 b3 08 65 d8 40 72 0e d1 df d4 d2 da 13 6c 2a ee 01 c9 3f 40 2a ac 99 98 32 12 79 f4 eb c0 cf f3 55 ee 64 64 c6 31 93 50 c3 2a 78 e5 99 d8 6d f6 fa 72 68 a2 85 c9 9b 6f 87 c1 58 b6 c5 85 23 2c e3 1c f6 3c 13 46 57 5e b6 8d b6 dd a3 c2 73 8d c4 71 41 b4 6b 90 7c 4d c0 97 f0 99 8b 7d 33 c7 b6 45 55 49 e2 b9 5c 48 03 64 91 cd 74 d3 a4 8e 5c a3 d4 d9 d1 20 96 29 e3 59 21 65 74 61 90 45 58 15 85 d3 e5 96 c5 b1 11 26 16 3c a7 a5 6b ed ee 56 55 07 d6 99 76 21 a6 8b d4 ab ca 55 08 38 d3 69 c6 9b 50 87 95 9b f8 8b 5f b4 d1 2d 1a 46 1e 34 e7 88 e1 1e bf 5a 2d 79 34 91 46 c5 31 9c 1a e0 ba b5 d5 c5 e6 b2 eb 70 db 86 fc 51 70 ac 0e 5a 45 eb 6f ea 7a fd e7 f5 0d 6d cf 84 a7 36 Data Ascii: cJRQ] ~Q8e@rl?@2yUdd1PxmrhoX#,<FW^sqAk\|M}3EUI\Hdt\ )Y!etaEX&<kVUv!U8iP_-F4Z-y4F1pQpZEozm6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49904	141.101.120.10	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:06 UTC	767	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1 Host: e.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	1368	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:06 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: ger1 Set-Cookie: m=1; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 12:15:26 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=1; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 11:52:06 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: df=1734432726; Domain=dtscout.com; Expires=Thu, 27-Mar-2025 10:52:06 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure Set-Cookie: l=51A0173443272670518C9622FCF8D1A8; Domain=dtscout.com; Expires=Sun, 16-Mar-2025 10:52:06 GMT; Max-Age=7689600; Path=/; SameSite=None; Secure X-T: 0.322 Expires: Tue, 17 Dec 2024 10:52:05 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJmDjYHPeMmJAHqTj4ISRJdbQzVJKW2XfHv8H%2FiWV04NzrYK5lCoQMThmq3JryC4a30iQ3foHjtM8CO1UsuRb9mz42HJ5ua9hjVaNt5i3yAbbAa4%2BR5JsBUZnsOWEzQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365c9be8994291-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1553&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1345&delivery_rate=1775075&cwnd=207&unsent_bytes=0&cid=6a178428465ff9e5&ts=622&x=0"
2024-12-17 10:52:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-17 10:52:06 UTC	1368	IN	Data Raw: 32 30 37 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 35 31 41 30 31 37 33 34 34 33 32 37 32 36 37 30 35 31 38 43 39 36 32 32 46 43 46 38 44 31 41 38 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 73 68 3d 30 3b 69 66 Data Ascii: 2078(function() { var dc = {}; var gu = false; var su = "51A0173443272670518C9622FCF8D1A8"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.prototype.dts_hash_code=function(){var hash=0;if
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 20 20 20 20 69 66 28 65 2e 6f 72 69 67 69 6e 2e 69 6e 64 65 78 4f 66 28 27 64 74 73 63 6f 75 74 2e 63 6f 6d 27 29 20 3e 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 65 2e 64 61 74 61 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 65 6d 70 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 70 28 74 65 6d 70 2e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 6d 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 Data Ascii: if(e.origin.indexOf('dtscout.com') >= 0) { if(e.data.length > 0) { var temp = JSON.parse(e.data); lp(temp.u); gm = true; } } }); t
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 33 37 30 38 35 30 39 38 26 6d 61 70 70 65 64 3d 22 2b 75 69 64 3b 6a 2e 77 69 64 74 68 3d 31 3b 6a 2e 68 65 69 67 68 74 3d 31 3b 6a 2e 62 6f 72 64 65 72 3d 30 3b 6a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 3b 6a 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 74 61 72 67 65 74 29 20 7b 20 74 72 79 7b 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 74 61 72 67 65 74 29 3b 7d 63 61 74 63 Data Ascii: s://pixel.onaudience.com/?partner=137085098&mapped="+uid;j.width=1;j.height=1;j.border=0;j.style.display="none";document.getElementsByTagName("body")[0].appendChild(j);j.onload=function(e){if(e.target) { try{e.target.parentNode.removeChild(e.target);}catc
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 20 20 76 61 72 20 5f 20 3d 20 65 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 2c 20 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 32 20 3d 3d 20 5f 2e 6c 65 6e 67 74 68 20 26 26 20 28 64 5b 5f 5b 30 5d 5d 20 3d 20 75 6e 65 73 63 61 70 65 28 5f 5b 31 5d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 73 63 28 6e 2c 76 2c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 73 70 6c 69 Data Ascii: var _ = e[s].split("=", 2); 2 == _.length && (d[_[0]] = unescape(_[1])) } } return d } function __sc(n,v,d) { var splitHostname = window.location.hostname.split('.'); for (var i = spli
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 20 21 30 3b 73 2e 73 72 63 20 3d 20 22 2f 2f 22 20 2b 20 70 2e 63 64 6d 6e 20 2b 20 22 2f 31 2f 22 20 2b 20 70 2e 6c 6d 20 2b 20 22 2f 22 20 2b 20 70 2e 74 74 20 2b 20 22 3f 22 20 2b 20 6b 2e 6a 6f 69 6e 28 22 26 22 29 3b 64 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 5f 70 78 54 61 67 49 6e 6a 65 63 74 28 6c 69 6a 69 74 44 61 74 61 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 2c 20 22 6c 6f 63 61 74 69 6f 6e 22 29 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 64 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 70 64 2f 64 74 73 63 6f 75 74 22 3b Data Ascii: !0;s.src = "//" + p.cdmn + "/1/" + p.lm + "/" + p.tt + "?" + k.join("&");d.body.appendChild(s);}_pxTagInject(lijitData, document, window, "location");})();(function(){try{var s=document.createElement("script");s.src="https://pd.sharethis.com/pd/dtscout";
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 31 3a 63 2c 75 33 3a 63 2c 70 76 3a 30 2c 63 3a 7b 7d 7d 29 2c 22 70 6c 22 69 6e 20 74 26 26 68 28 74 2e 70 6c 2c 64 29 3b 76 61 72 20 75 3d 7b 61 3a 22 76 22 2c 68 3a 61 7d 3b 66 6f 72 28 76 61 72 20 76 20 69 6e 21 73 26 26 63 3e 64 2e 73 6c 2b 31 38 30 30 26 26 28 64 2e 73 73 3d 70 28 31 30 29 2c 64 2e 73 74 3d 63 2c 64 2e 70 76 3d 30 2c 75 2e 73 3d 31 29 2c 64 2e 70 76 2b 2b 2c 64 2e 73 6c 3d 63 2c 75 2e 73 73 3d 64 2e 73 73 2c 75 2e 70 76 3d 64 2e 70 76 2c 75 2e 6c 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 63 2d 64 2e 73 74 29 2c 28 73 7c 7c 63 3e 64 2e 75 31 2b 38 36 34 30 30 29 26 26 28 64 2e 75 31 3d 63 2c 75 2e 75 31 3d 31 29 2c 28 73 7c 7c 63 3e 64 2e 75 33 2b 32 35 39 32 65 33 29 26 26 28 64 2e 75 33 3d 63 2c 75 2e 75 33 3d 31 29 2c 66 28 64 29 2c Data Ascii: 1:c,u3:c,pv:0,c:{}}),"pl"in t&&h(t.pl,d);var u={a:"v",h:a};for(var v in!s&&c>d.sl+1800&&(d.ss=p(10),d.st=c,d.pv=0,u.s=1),d.pv++,d.sl=c,u.ss=d.ss,u.pv=d.pv,u.ls=Math.round(c-d.st),(s\|\|c>d.u1+86400)&&(d.u1=c,u.u1=1),(s\|\|c>d.u3+2592e3)&&(d.u3=c,u.u3=1),f(d),
2024-12-17 10:52:06 UTC	107	IN	Data Raw: 63 3a 7b 7d 7d 3a 22 63 22 69 6e 20 6e 7c 7c 28 6e 2e 63 3d 7b 7d 29 2c 74 29 6e 2e 63 5b 6f 5d 3d 74 5b 6f 5d 3b 66 28 6e 29 7d 7d 28 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 3d 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 7c 7c 7b 22 70 6c 22 3a 7b 22 63 63 22 3a 22 75 73 22 2c 22 70 6c 22 3a 22 64 22 7d 7d 29 3b 0a 0a 0d 0a Data Ascii: c:{}}:"c"in n\|\|(n.c={}),t)n.c[o]=t[o];f(n)}}(window._dtspv=window._dtspv\|\|{"pl":{"cc":"us","pl":"d"}});
2024-12-17 10:52:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49907	172.67.183.59	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:06 UTC	515	OUT	GET /images/btn-overlay.png HTTP/1.1 Host: alluc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4329645=1734432721689; HstCla4329645=1734432721689; HstCmu4329645=1734432721689; HstPn4329645=1; HstPt4329645=1; HstCnv4329645=1; HstCns4329645=1
2024-12-17 10:52:06 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Tue, 17 Dec 2024 10:52:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-12-17 10:52:06 UTC	901	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 59 77 2f 71 2b 4b 58 62 68 4f 6d 66 33 78 37 37 50 4e 67 4d 63 63 6d 63 75 78 63 59 58 30 6a 66 34 34 42 4c 57 73 78 50 5a 33 53 58 4c 5a 56 55 31 56 56 62 35 57 56 6a 50 44 6f 65 36 2f 74 30 34 2f 41 4b 50 69 77 38 7a 71 4d 47 6c 59 4b 2b 73 51 33 5a 4e 46 61 41 61 32 52 71 4a 73 56 33 35 4f 42 62 75 44 2b 2f 49 63 77 3d 24 38 6d 33 64 46 57 36 4c 57 51 4b 4f 2b 59 43 54 63 6a 30 41 2f 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: Yw/q+KXbhOmf3x77PNgMccmcuxcYX0jf44BLWsxPZ3SXLZVU1VVb5WVjPDoe6/t04/AKPiw8zqMGlYK+sQ3ZNFaAa2RqJsV35OBbuD+/Icw=$8m3dFW6LWQKO+YCTcj0A/g==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 32 32 38 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 228b<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 54 46 79 64 50 72 45 75 43 6a 4c 59 4d 57 32 33 68 51 50 6a 6a 77 69 2e 42 70 6c 62 58 48 7a 5a 6f 52 5a 33 38 72 41 2e 70 58 35 41 45 32 55 78 34 72 47 72 58 32 34 51 74 63 71 69 30 4c 54 68 72 44 50 6d 34 32 5f 62 58 48 32 6a 7a 56 4c 53 43 73 44 75 78 64 6b 72 65 42 76 30 53 72 47 5f 41 5f 62 77 4c 6f 48 6a 45 4f 34 76 5a 4f 47 54 31 7a 30 70 6a 52 6b 44 68 55 63 41 56 34 34 6e 48 36 65 65 6d 52 37 67 4d 45 49 5a 35 6b 47 42 54 4d 59 55 64 56 4e 67 74 72 76 55 36 42 36 49 64 58 34 47 4f 2e 32 73 65 68 68 51 41 7a 33 73 67 66 73 39 6d 36 6b 65 77 39 79 74 48 51 4c 74 69 6d 49 5a 57 46 4b 38 4a 30 76 53 61 5f 78 4f 44 5f 51 56 5f 72 61 56 59 36 6e 7a 66 2e 65 6e 53 53 7a 4f 36 47 4a 53 38 56 51 33 73 44 63 44 49 54 52 62 69 48 65 66 39 75 2e 6a 79 6d 6e Data Ascii: TFydPrEuCjLYMW23hQPjjwi.BplbXHzZoRZ38rA.pX5AE2Ux4rGrX24Qtcqi0LThrDPm42_bXH2jzVLSCsDuxdkreBv0SrG_A_bwLoHjEO4vZOGT1z0pjRkDhUcAV44nH6eemR7gMEIZ5kGBTMYUdVNgtrvU6B6IdX4GO.2sehhQAz3sgfs9m6kew9ytHQLtimIZWFK8J0vSa_xOD_QV_raVY6nzf.enSSzO6GJS8VQ3sDcDITRbiHef9u.jymn
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 6a 49 64 56 70 6b 4e 6b 59 73 32 66 4e 32 52 79 30 42 32 57 52 6d 38 6d 33 61 64 34 6c 48 39 4d 51 34 37 6c 79 76 4a 62 31 69 51 59 33 69 74 71 75 43 75 37 55 51 55 36 77 77 43 41 73 36 48 64 62 77 74 5a 66 6a 49 43 4e 75 4f 67 72 31 36 65 74 76 53 54 53 6a 7a 38 75 38 47 6d 67 4b 69 46 78 6a 53 77 47 73 55 53 65 31 74 75 70 58 63 57 66 54 30 51 38 62 66 5a 64 6e 69 72 58 47 34 69 51 64 53 59 4c 4b 66 69 45 63 61 74 78 6b 6a 34 34 4d 6a 6f 6e 4a 43 7a 77 43 4b 6c 69 4e 70 61 49 6d 6c 54 74 67 34 33 4e 4c 41 41 50 49 6e 4b 54 7a 7a 39 6d 2e 4f 46 61 4f 74 78 63 41 6e 68 2e 5f 53 54 41 4e 70 68 36 52 34 42 50 57 39 64 79 53 64 31 41 4b 68 47 76 6d 37 79 4c 61 73 55 7a 64 6d 48 36 68 73 4e 30 45 5a 65 2e 63 65 4b 72 43 7a 73 35 46 37 4a 65 31 76 41 75 61 2e Data Ascii: jIdVpkNkYs2fN2Ry0B2WRm8m3ad4lH9MQ47lyvJb1iQY3itquCu7UQU6wwCAs6HdbwtZfjICNuOgr16etvSTSjz8u8GmgKiFxjSwGsUSe1tupXcWfT0Q8bfZdnirXG4iQdSYLKfiEcatxkj44MjonJCzwCKliNpaImlTtg43NLAAPInKTzz9m.OFaOtxcAnh._STANph6R4BPW9dySd1AKhGvm7yLasUzdmH6hsN0EZe.ceKrCzs5F7Je1vAua.
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 70 5a 37 43 63 46 49 6f 78 51 5f 4a 45 4e 4a 4d 35 74 77 6c 49 6f 33 62 54 35 72 79 30 55 67 31 30 43 6d 51 5f 41 73 34 56 5f 42 46 70 47 70 4e 42 75 4b 56 39 65 2e 47 70 70 79 49 78 4c 44 63 70 51 36 61 32 51 43 4e 77 43 69 6a 77 5a 53 6b 33 46 63 65 55 34 5a 65 75 62 47 6a 4f 52 45 50 6b 4c 41 73 54 71 70 6f 33 77 77 34 37 42 6d 38 35 49 35 6e 53 55 39 41 4d 54 6d 31 61 38 4c 47 4e 38 7a 30 68 50 66 6e 2e 44 47 36 66 39 74 6c 69 45 66 59 63 39 55 45 56 52 4c 2e 54 5f 35 34 41 6c 4c 67 44 51 4e 6d 5a 4d 47 50 48 50 76 6b 49 62 52 53 34 67 65 53 2e 58 52 57 30 4a 52 75 49 61 76 47 37 34 51 54 4d 35 52 72 6d 74 39 33 62 73 48 78 54 75 39 49 70 36 41 57 36 4d 42 50 53 55 43 78 46 59 44 42 66 4e 69 36 76 41 6d 57 66 6a 77 6a 73 66 33 55 63 77 56 52 4f 6c 2e Data Ascii: pZ7CcFIoxQ_JENJM5twlIo3bT5ry0Ug10CmQ_As4V_BFpGpNBuKV9e.GppyIxLDcpQ6a2QCNwCijwZSk3FceU4ZeubGjOREPkLAsTqpo3ww47Bm85I5nSU9AMTm1a8LGN8z0hPfn.DG6f9tliEfYc9UEVRL.T_54AlLgDQNmZMGPHPvkIbRS4geS.XRW0JRuIavG74QTM5Rrmt93bsHxTu9Ip6AW6MBPSUCxFYDBfNi6vAmWfjwjsf3UcwVROl.
2024-12-17 10:52:06 UTC	1369	IN	Data Raw: 48 36 51 47 35 4d 6f 43 72 67 4e 5f 7a 79 58 79 65 42 74 30 79 65 43 2e 48 4b 67 75 33 6a 55 70 74 50 37 5a 4f 59 74 63 34 41 77 77 66 6e 42 41 30 72 31 43 42 75 49 73 69 46 49 6d 39 65 6a 4d 67 45 56 73 6d 4e 64 35 30 71 64 33 5f 59 4b 74 79 70 56 45 4d 4d 6f 4c 6a 65 31 69 79 38 34 78 66 72 76 56 56 79 77 5f 69 64 50 42 79 43 63 5f 74 68 57 71 6a 63 69 54 46 35 54 4e 64 55 77 72 53 48 5f 74 68 4e 37 4c 44 6f 4f 74 5a 43 65 69 4c 42 43 4d 46 43 4f 6c 48 4f 59 74 64 30 47 79 6c 48 6e 6b 57 32 64 50 66 44 30 48 58 6a 6a 30 39 6d 6d 67 73 57 6a 75 62 31 33 57 53 67 68 50 59 73 48 53 59 65 6b 4c 5a 45 2e 41 57 6b 4d 6d 52 2e 2e 35 79 4e 79 72 31 79 41 50 44 7a 4d 65 45 38 5a 2e 72 5a 55 54 41 76 76 61 68 53 45 77 35 58 6b 6b 36 50 74 68 55 44 6c 2e 67 70 59 Data Ascii: H6QG5MoCrgN_zyXyeBt0yeC.HKgu3jUptP7ZOYtc4AwwfnBA0r1CBuIsiFIm9ejMgEVsmNd50qd3_YKtypVEMMoLje1iy84xfrvVVyw_idPByCc_thWqjciTF5TNdUwrSH_thN7LDoOtZCeiLBCMFCOlHOYtd0GylHnkW2dPfD0HXjj09mmgsWjub13WSghPYsHSYekLZE.AWkMmR..5yNyr1yAPDzMeE8Z.rZUTAvvahSEw5Xkk6PthUDl.gpY
2024-12-17 10:52:06 UTC	637	IN	Data Raw: 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 Data Ascii: && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_ch
2024-12-17 10:52:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49906	149.56.240.129	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:06 UTC	770	OUT	GET /stats/0.php?4329645&@f16&@g1&@h1&@i1&@j1734432721689&@k0&@l1&@mWatch%20Passengers%20Online%20Free&@n0&@ohttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&@q0&@r0&@s0&@ten-US&@u1280&@b1:37846529&@b3:1734432722&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:06 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:06 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 380 Connection: close
2024-12-17 10:52:06 UTC	380	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 35 30 37 36 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 Data Ascii: _HST_cntval="#3Vis. today=5076";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="as

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49917	141.101.120.10	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	669	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&j=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1 Host: e.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
2024-12-17 10:52:08 UTC	1232	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: ger1 Set-Cookie: m=2; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 12:15:28 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=2; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 11:52:08 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: l=51A0173443272670518C9622FCF8D1A8; Domain=dtscout.com; Expires=Sat, 15-Mar-2025 10:52:08 GMT; Max-Age=7603200; Path=/; SameSite=None; Secure X-T: 0.311 Expires: Tue, 17 Dec 2024 10:52:07 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5fBd9bFEbxA8m7BXPLXPMq88YLExtWZeUw8gtSUrWrSZPPRI9ENEjkC5MYtTe9yHIR8bkBaaaPmrn%2FXytZwOetrOAu2Y5Kk4EuBD8cKztVTU54lzfg7xxzfLx5Rkr4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365ca989734352-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1753&min_rtt=1753&rtt_var=876&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4196&recv_bytes=1247&delivery_rate=91619&cwnd=239&unsent_bytes=0&cid=c53da86b532e39ec&ts=640&x=0"
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 32 30 39 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 22 35 31 41 30 31 37 33 34 34 33 32 37 32 36 37 30 35 31 38 43 39 36 32 32 46 43 46 38 44 31 41 38 22 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 35 31 41 30 31 37 33 34 34 33 32 37 32 38 46 46 34 42 41 36 31 43 35 39 43 45 43 38 41 45 46 32 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f Data Ascii: 2095(function() { var dc = {}; var gu = "51A0173443272670518C9622FCF8D1A8"; var su = "51A01734432728FF4BA61C59CEC8AEF2"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.prototype.dts_hash_
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 61 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 65 2e 6f 72 69 67 69 6e 2e 69 6e 64 65 78 4f 66 28 27 64 74 73 63 6f 75 74 2e 63 6f 6d 27 29 20 3e 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 65 2e 64 61 74 61 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 65 6d 70 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 70 28 74 65 6d 70 2e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 6d 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: age', function(e) { if(e.origin.indexOf('dtscout.com') >= 0) { if(e.data.length > 0) { var temp = JSON.parse(e.data); lp(temp.u); gm = true; }
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 20 6a 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 33 37 30 38 35 30 39 38 26 6d 61 70 70 65 64 3d 22 2b 75 69 64 3b 6a 2e 77 69 64 74 68 3d 31 3b 6a 2e 68 65 69 67 68 74 3d 31 3b 6a 2e 62 6f 72 64 65 72 3d 30 3b 6a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 3b 6a 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 74 61 72 67 65 74 29 20 7b 20 74 72 79 7b 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: eElement("img"); j.src="https://pixel.onaudience.com/?partner=137085098&mapped="+uid;j.width=1;j.height=1;j.border=0;j.style.display="none";document.getElementsByTagName("body")[0].appendChild(j);j.onload=function(e){if(e.target) { try{e.target.parentNode
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3b 20 73 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 20 3d 20 65 5b 73 5d 2e 73 70 6c 69 74 28 22 3d 22 2c 20 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 32 20 3d 3d 20 5f 2e 6c 65 6e 67 74 68 20 26 26 20 28 64 5b 5f 5b 30 5d 5d 20 3d 20 75 6e 65 73 63 61 70 65 28 5f 5b 31 5d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 73 63 28 6e 2c 76 2c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 Data Ascii: ength; s++) { var _ = e[s].split("=", 2); 2 == _.length && (d[_[0]] = unescape(_[1])) } } return d } function __sc(n,v,d) { var splitHostname = window.location.hostname.split('.'
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 69 74 73 63 72 70 74 22 3b 73 2e 61 73 79 6e 63 20 3d 20 73 2e 64 65 66 65 72 20 3d 20 21 30 3b 73 2e 73 72 63 20 3d 20 22 2f 2f 22 20 2b 20 70 2e 63 64 6d 6e 20 2b 20 22 2f 31 2f 22 20 2b 20 70 2e 6c 6d 20 2b 20 22 2f 22 20 2b 20 70 2e 74 74 20 2b 20 22 3f 22 20 2b 20 6b 2e 6a 6f 69 6e 28 22 26 22 29 3b 64 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 5f 70 78 54 61 67 49 6e 6a 65 63 74 28 6c 69 6a 69 74 44 61 74 61 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 2c 20 22 6c 6f 63 61 74 69 6f 6e 22 29 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 Data Ascii: itscrpt";s.async = s.defer = !0;s.src = "//" + p.cdmn + "/1/" + p.lm + "/" + p.tt + "?" + k.join("&");d.body.appendChild(s);}_pxTagInject(lijitData, document, window, "location");})();(function(){try{var s=document.createElement("script");s.src="https://p
2024-12-17 10:52:08 UTC	1369	IN	Data Raw: 73 3d 21 30 2c 64 3d 7b 73 73 3a 70 28 31 30 29 2c 73 74 3a 63 2c 73 6c 3a 63 2c 75 31 3a 63 2c 75 33 3a 63 2c 70 76 3a 30 2c 63 3a 7b 7d 7d 29 2c 22 70 6c 22 69 6e 20 74 26 26 68 28 74 2e 70 6c 2c 64 29 3b 76 61 72 20 75 3d 7b 61 3a 22 76 22 2c 68 3a 61 7d 3b 66 6f 72 28 76 61 72 20 76 20 69 6e 21 73 26 26 63 3e 64 2e 73 6c 2b 31 38 30 30 26 26 28 64 2e 73 73 3d 70 28 31 30 29 2c 64 2e 73 74 3d 63 2c 64 2e 70 76 3d 30 2c 75 2e 73 3d 31 29 2c 64 2e 70 76 2b 2b 2c 64 2e 73 6c 3d 63 2c 75 2e 73 73 3d 64 2e 73 73 2c 75 2e 70 76 3d 64 2e 70 76 2c 75 2e 6c 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 63 2d 64 2e 73 74 29 2c 28 73 7c 7c 63 3e 64 2e 75 31 2b 38 36 34 30 30 29 26 26 28 64 2e 75 31 3d 63 2c 75 2e 75 31 3d 31 29 2c 28 73 7c 7c 63 3e 64 2e 75 33 2b 32 35 Data Ascii: s=!0,d={ss:p(10),st:c,sl:c,u1:c,u3:c,pv:0,c:{}}),"pl"in t&&h(t.pl,d);var u={a:"v",h:a};for(var v in!s&&c>d.sl+1800&&(d.ss=p(10),d.st=c,d.pv=0,u.s=1),d.pv++,d.sl=c,u.ss=d.ss,u.pv=d.pv,u.ls=Math.round(c-d.st),(s\|\|c>d.u1+86400)&&(d.u1=c,u.u1=1),(s\|\|c>d.u3+25
2024-12-17 10:52:08 UTC	135	IN	Data Raw: 6d 28 29 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 3d 7b 63 3a 7b 7d 7d 3a 22 63 22 69 6e 20 6e 7c 7c 28 6e 2e 63 3d 7b 7d 29 2c 74 29 6e 2e 63 5b 6f 5d 3d 74 5b 6f 5d 3b 66 28 6e 29 7d 7d 28 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 3d 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 7c 7c 7b 22 70 6c 22 3a 7b 22 63 63 22 3a 22 75 73 22 2c 22 70 6c 22 3a 22 64 22 7d 7d 29 3b 0a 0a 0d 0a Data Ascii: m();for(var o in null==n?n={c:{}}:"c"in n\|\|(n.c={}),t)n.c[o]=t[o];f(n)}}(window._dtspv=window._dtspv\|\|{"pl":{"cc":"us","pl":"d"}});
2024-12-17 10:52:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49919	141.101.120.10	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	778	OUT	GET /idg/?su=51A0173443272670518C9622FCF8D1A8 HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
2024-12-17 10:52:08 UTC	848	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 17 Dec 2024 10:52:07 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Fm06Z%2F8mX%2FvM53o0YuGxeXj%2FhX7wDXAIm4ovMA%2BvdwEkWlFu%2BoMkcPXNSNKWDxiqsgJwNZse2iZzMFnkrEIipxESbX5X1tt8YUFrlY%2FAGuhVSa4NkEVVZHiTPw5Wv8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365ca9da5343e6-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1860&min_rtt=1856&rtt_var=704&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1356&delivery_rate=1544973&cwnd=252&unsent_bytes=0&cid=bb07bc9b94751fca&ts=613&x=0"
2024-12-17 10:52:08 UTC	521	IN	Data Raw: 35 34 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 75 69 64 5f 67 20 20 3d 20 27 35 31 41 30 31 37 33 34 34 33 32 37 32 36 37 30 35 31 38 43 39 36 32 32 46 43 46 38 44 31 41 38 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 20 20 3d 20 27 35 31 41 30 31 37 33 34 34 33 32 37 32 38 44 38 41 32 35 45 38 31 38 36 45 37 44 46 30 33 41 31 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 75 20 3d 20 27 35 31 41 30 31 37 33 34 34 33 32 37 32 36 37 30 35 31 38 43 39 36 32 32 46 43 46 38 44 31 41 38 27 3b 0a 0a 20 20 20 20 76 61 72 20 64 65 62 75 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 Data Ascii: 546<html><head></head><body><script>window.onload = function() { var uid_g = '51A0173443272670518C9622FCF8D1A8'; var uid_s = '51A01734432728D8A25E8186E7DF03A1'; var uid_su = '51A0173443272670518C9622FCF8D1A8'; var debug = {}; v
2024-12-17 10:52:08 UTC	836	IN	Data Raw: 20 20 20 20 20 6d 65 74 68 6f 64 20 3d 20 22 73 65 74 22 3b 0a 20 20 20 20 20 20 20 20 70 61 73 73 5f 75 69 64 20 3d 20 75 69 64 5f 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 64 65 62 75 67 2e 70 61 73 73 5f 6d 65 74 68 6f 64 20 3d 20 6d 65 74 68 6f 64 3b 0a 20 20 20 20 64 65 62 75 67 2e 70 61 73 73 5f 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 0a 20 20 20 20 76 61 72 20 6c 73 5f 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 73 5f 75 69 64 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 75 69 64 27 29 3b 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 6c 73 5f 75 69 64 20 3d 20 6c 73 5f 75 69 64 3b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 69 64 20 3d 20 66 61 6c 73 Data Ascii: method = "set"; pass_uid = uid_s; } debug.pass_method = method; debug.pass_uid = pass_uid; var ls_uid = null; try { var ls_uid = localStorage.getItem('uid'); debug.ls_uid = ls_uid; var uid = fals
2024-12-17 10:52:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49925	141.101.120.11	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	671	OUT	GET /pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1734432726; l=51A0173443272670518C9622FCF8D1A8
2024-12-17 10:52:09 UTC	832	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.146 X-C: 0 Expires: Tue, 17 Dec 2024 10:52:07 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJwfyt2s2dKAOep8UxmjbKFYAO8rB2MHM3fxXh5rcPwpxCVMEvkCi46gh0rgDe4AF2vnRvrQ1yiz5WVXozM6qNwHAUkYmNiS4ItOvdPoJhDJjVaRmBtR0NV62QY9Go0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cab1d3d8c93-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4395&min_rtt=2087&rtt_var=2371&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1249&delivery_rate=1399137&cwnd=192&unsent_bytes=0&cid=4e6665f6798c8be6&ts=624&x=0"
2024-12-17 10:52:09 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 31 32 38 6e 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'128n');}catch(e){}
2024-12-17 10:52:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49914	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	342	OUT	GET /loading.gif HTTP/1.1 Host: gomo.to Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:09 UTC	287	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:08 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Last-Modified: Sun, 18 Aug 2024 07:42:32 GMT ETag: "67c7-61ff055cadbeb" Accept-Ranges: bytes Content-Length: 26567 Vary: User-Agent Connection: close Content-Type: image/gif
2024-12-17 10:52:09 UTC	7905	IN	Data Raw: 47 49 46 38 39 61 80 00 80 00 f7 b5 00 4c 00 01 51 04 07 5c 06 02 6e 05 0a 55 12 10 7d 0c 0e 59 17 18 6f 12 0c 70 14 14 5d 1a 1b 8d 15 12 5f 23 23 7f 1b 17 8e 17 19 9f 13 15 9f 13 1b 75 22 1e 64 2d 2c 8f 23 21 83 27 26 af 1b 1e 9e 21 22 69 32 33 91 27 28 72 34 33 9f 2a 2b be 22 21 6c 3a 39 af 28 2c 75 3d 3e 9f 32 31 bd 2c 2e cd 28 29 6f 43 43 ce 29 24 85 3f 40 9f 3a 3a 93 3e 3b e1 27 2d 94 3f 41 bb 34 34 ad 38 39 cb 30 30 7b 48 47 75 4a 4b dd 2f 32 ad 3f 40 a0 43 43 f0 2c 30 86 4c 4d c9 39 3c 8d 4c 4a 7e 52 52 b8 42 42 7a 54 52 ec 34 35 85 52 50 a1 4a 4a ad 47 4a c7 40 42 ff 32 32 9e 4e 4c ff 32 38 b7 49 49 8a 56 57 85 58 58 ac 4d 4c 90 55 55 c5 46 45 95 54 57 7d 5b 5e fa 39 3d fb 3a 37 b7 4f 4c 85 5e 5c b7 50 52 f6 3f 42 82 62 63 93 5e 5e 8d 60 60 f1 46 Data Ascii: GIF89aLQ\nU}Yop]_##u"d-,#!'&!"i23'(r43*+"!l:9(,u=>21,.()oCC)$?@::>;'-?A448900{HGuJK/2?@CC,0LM9<LJ~RRBBzTR45RPJJGJ@B22NL28IIVWXXMLUUFETW}[^9=:7OL^\PR?Bbc^^``F
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 08 66 cc ba 84 66 e1 0c 32 8b d0 0e a0 41 77 20 9d 30 ed 69 cc 9a 04 b2 2e b0 47 60 ec d8 b3 69 17 d4 72 fb b4 9b 52 9a 76 e7 fe fc 3b b4 f0 81 92 8a 9f 26 26 94 e5 63 55 42 57 34 8f fd 5c e0 65 e9 8b 1b 08 ff 04 c2 f9 89 c0 03 db 9d 3f d7 0b 7e 71 af 52 6e 38 0b c4 93 1e b4 dd e7 80 da 2f 76 a2 fb b1 40 1a f5 49 d6 9d 40 c4 e9 a7 d6 05 a3 88 f2 d8 04 5e 05 48 d7 52 95 49 32 05 2b a6 08 55 4a 81 06 52 85 95 56 6f 01 e1 9b 83 61 05 31 10 1e 36 18 e1 d4 14 0e a4 e8 c0 18 16 7e 97 61 1a a5 a0 f1 57 1d a5 54 01 22 58 86 0d 24 c0 8e 02 18 31 1a 4a a2 e4 a0 a2 8a 58 0c c4 9e 81 27 f4 b7 95 40 b0 81 98 a3 40 3c f2 18 82 4c 42 0e a9 e2 14 a3 08 c4 4b 86 0a 68 32 8a 75 45 31 f0 a1 83 f7 41 19 a5 94 3f 66 84 a2 95 43 b2 32 50 09 19 02 52 ca 6a 46 99 c7 5c 80 c1 cd Data Ascii: ff2Aw 0i.G`irRv;&&cUBW4\e?~qRn8/v@I@^HRI2+UJRVoa16~aWT"X$1JX'@@<LBKh2uE1A?fC2PRjF\
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: e3 a9 7e e2 d6 00 10 b3 ab c7 9b 00 1e 4f af ce b9 3d 02 29 4a a1 6a 68 bf 39 16 c8 dd 6f 85 47 88 ed c2 7e 41 2b 4d 80 36 00 ba a0 15 1b 8c b7 d7 2e 64 c4 17 98 4d 58 1f 0c 24 04 ea 1e 77 a6 e7 9a 0a 1b 7c 7b 94 03 59 c3 17 a4 f0 85 a9 ea 5a dd f0 16 c8 70 5b 0d f0 8c e4 f9 d6 d6 6e b8 4c ba a0 dd 4a 13 20 e2 12 97 09 26 ba 40 6c 30 6f a0 0b c6 cd f8 53 30 41 88 37 74 c1 08 28 0a 37 42 17 de 40 88 90 d7 2d 20 00 21 f9 04 05 09 00 bb 00 2c 0d 00 0d 00 66 00 66 00 00 08 ff 00 77 09 1c 48 b0 a0 c1 83 08 13 86 ba 74 a8 4f 1b 35 10 fb 1c aa 14 2a a1 c5 8b 18 33 6a dc 38 30 54 9f 24 1a 42 8a 1c 19 32 49 9f 8a 1c 53 aa 5c 89 91 cf 07 92 30 49 7e 38 c4 b2 a6 4d 95 7c 62 ea 24 49 f3 a6 4f 9f 70 c2 84 81 d3 a9 94 d1 1a 3b 93 6a 58 62 b4 54 26 31 b6 b8 c8 89 f4 b3 Data Ascii: ~O=)Jjh9oG~A+M6.dMX$w\|{YZp[nLJ &@l0oS0A7t(7B@- !,ffwHtO5*3j80T$B2IS\0I~8M\|b$IOp;jXbT&1
2024-12-17 10:52:09 UTC	2662	IN	Data Raw: 1d 50 cb db 0a 90 55 14 21 15 29 49 33 42 54 84 ca 56 20 58 b5 6d 68 19 60 10 27 f0 a2 04 25 98 81 13 ea a0 09 a5 70 42 af bc 45 6d 06 a4 e9 8a e0 36 14 aa 1b 99 68 4f 5d 31 02 e5 2a b7 0e 02 d1 42 03 14 c0 de f6 b2 b7 01 5a 10 c8 6e b3 cb 5b 0f 0c c4 16 0e fd c3 49 94 a0 cf 20 0c a4 bc e6 b5 2d 20 4a a1 05 f7 1a b8 bd 5a 28 85 1f e8 9b 5d 12 70 a2 14 a3 c0 af 3f d5 7a 12 c3 76 b3 09 03 89 41 80 95 2b 10 09 1c f8 c0 17 18 05 27 18 9c dd 17 0c 84 0b f1 dc ac 4a 2c 8c cc 2a 0c 04 07 1b b6 ed 2c 4a a1 89 0f 7f 98 ac 39 20 31 6f 7b 20 90 52 f4 33 9c 3a 98 09 7f f7 39 0a 20 c4 d8 b6 59 28 05 20 6c 7c e0 34 98 56 c7 bc 65 85 ed 7e 4c 4b 0a cb 24 11 4d a0 01 41 8c 7c e4 d0 be a2 14 4e 60 b2 81 67 20 10 28 f3 16 0b 4a 39 85 2d b8 e0 5a b4 3c a1 ff cb cb 15 c8 05 Data Ascii: PU!)I3BTV Xmh`'%pBEm6hO]1BZn[I - JZ(]p?zvA+'J,,J9 1o{ R3:9 Y( l\|4Ve~LK$MA\|N`g (J9-Z<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49915	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	351	OUT	GET /dsPlayer/dropzone.js HTTP/1.1 Host: gomo.to Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:09 UTC	316	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:09 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips Last-Modified: Sun, 02 Apr 2017 14:53:51 GMT ETag: "fb90-54c3035f5ddc0" Accept-Ranges: bytes Content-Length: 64400 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: application/javascript
2024-12-17 10:52:09 UTC	7876	IN	Data Raw: 0a 2f 2a 0a 20 2a 0a 20 2a 20 4d 6f 72 65 20 69 6e 66 6f 20 61 74 20 5b 77 77 77 2e 64 72 6f 70 7a 6f 6e 65 6a 73 2e 63 6f 6d 5d 28 68 74 74 70 3a 2f 2f 77 77 77 2e 64 72 6f 70 7a 6f 6e 65 6a 73 2e 63 6f 6d 29 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 2c 20 4d 61 74 69 61 73 20 4d 65 6e 6f 0a 20 2a 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f Data Ascii: /* * * More info at [www.dropzonejs.com](http://www.dropzonejs.com) * * Copyright (c) 2012, Matias Meno * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "So
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 20 3e 20 74 72 67 52 61 74 69 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 3d 20 66 69 6c 65 2e 68 65 69 67 68 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 3d 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 2a 20 74 72 67 52 61 74 69 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 3d 20 66 69 6c 65 2e 77 69 64 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 2e 73 72 63 48 65 69 67 68 74 20 3d 20 69 6e 66 6f 2e 73 72 63 57 69 64 74 68 20 2f 20 74 72 67 52 61 74 69 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 Data Ascii: > trgRatio) { info.srcHeight = file.height; info.srcWidth = info.srcHeight * trgRatio; } else { info.srcWidth = file.width; info.srcHeight = info.srcWidth / trgRatio; } }
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 3d 5c 22 65 76 65 6e 6f 64 64 5c 22 20 73 6b 65 74 63 68 3a 74 79 70 65 3d 5c 22 4d 53 50 61 67 65 5c 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 5c 22 4d 32 33 2e 35 2c 33 31 2e 38 34 33 31 34 35 38 20 4c 31 37 2e 35 38 35 32 34 31 39 2c 32 35 2e 39 32 38 33 38 37 37 20 43 31 36 2e 30 32 34 38 32 35 33 2c 32 34 2e 33 36 37 39 37 31 31 20 31 33 2e 34 39 31 30 32 39 34 2c 32 34 2e 33 36 36 38 33 35 20 31 31 2e 39 32 38 39 33 32 32 2c 32 35 2e 39 32 38 39 33 32 32 20 43 31 30 2e 33 37 30 30 31 33 36 2c 32 37 2e 34 38 37 38 35 30 38 20 31 30 2e 33 36 36 35 39 31 32 2c 33 30 2e 30 32 33 34 34 35 35 20 31 31 2e 39 32 38 33 38 37 37 2c 33 31 2e 35 38 35 32 34 31 39 20 4c 32 30 2e 34 31 34 37 35 38 31 2c 34 30 2e 30 37 31 36 31 32 33 20 43 32 30 Data Ascii: =\"evenodd\" sketch:type=\"MSPage\">\n <path d=\"M23.5,31.8431458 L17.5852419,25.9283877 C16.0248253,24.3679711 13.4910294,24.366835 11.9289322,25.9289322 C10.3700136,27.4878508 10.3665912,30.0234455 11.9283877,31.5852419 L20.4147581,40.0716123 C20
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 20 6e 75 6c 6c 29 20 7c 7c 20 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 46 69 6c 65 73 20 3e 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 68 69 64 64 65 6e 46 69 6c 65 49 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 75 6c 74 69 70 6c 65 22 2c 20 22 6d 75 6c 74 69 70 6c 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 68 69 64 64 65 6e 46 69 6c 65 49 6e 70 75 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 64 7a 2d 68 69 64 64 65 6e 2d 69 6e 70 75 74 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 70 74 65 64 46 69 6c 65 73 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: null) \|\| _this.options.maxFiles > 1) { _this.hiddenFileInput.setAttribute("multiple", "multiple"); } _this.hiddenFileInput.className = "dz-hidden-input"; if (_this.options.acceptedFiles != null) {
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 20 20 20 20 20 72 65 74 75 72 6e 20 65 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 5f 72 65 66 20 3d 20 5b 22 64 69 76 22 2c 20 22 66 6f 72 6d 22 5d 3b 0a 20 20 20 20 20 20 66 6f 72 20 28 5f 69 20 3d 20 30 2c 20 5f 6c 65 6e 20 3d 20 5f 72 65 66 2e 6c 65 6e 67 74 68 3b 20 5f 69 20 3c 20 5f 6c 65 6e 3b 20 5f 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 74 61 67 4e 61 6d 65 20 3d 20 5f 72 65 66 5b 5f 69 5d 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 61 6c 6c 62 61 63 6b 20 3d 20 67 65 74 46 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 61 67 4e 61 6d 65 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: return el; } } }; _ref = ["div", "form"]; for (_i = 0, _len = _ref.length; _i < _len; _i++) { tagName = _ref[_i]; if (fallback = getFallback(this.element.getElementsByTagName(tagName))) {
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 63 63 65 70 74 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 5f 65 72 72 6f 72 50 72 6f 63 65 73 73 69 6e 67 28 5b 66 69 6c 65 5d 2c 20 65 72 72 6f 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 2e 61 63 63 65 70 74 65 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 51 75 65 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 65 6e 71 75 65 75 65 Data Ascii: turn function(error) { if (error) { file.accepted = false; _this._errorProcessing([file], error); } else { file.accepted = true; if (_this.options.autoQueue) { _this.enqueue
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 73 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 70 74 69 6f 6e 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 44 72 6f 70 7a 6f 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 6c 6f 61 64 46 69 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 69 6c 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 75 70 6c 6f 61 64 46 69 6c 65 73 28 5b 66 69 6c 65 5d 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 44 72 6f 70 7a 6f 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 6c 6f 61 64 46 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 69 6c 65 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 66 69 6c 65 2c 20 66 6f 72 6d 44 61 74 61 2c 20 68 61 6e 64 Data Ascii: return option.apply(this, args); } return option; }; Dropzone.prototype.uploadFile = function(file) { return this.uploadFiles([file]); }; Dropzone.prototype.uploadFiles = function(files) { var file, formData, hand
2024-12-17 10:52:09 UTC	8000	IN	Data Raw: 70 7a 6f 6e 65 2c 20 64 72 6f 70 7a 6f 6e 65 73 2c 20 5f 69 2c 20 5f 6c 65 6e 2c 20 5f 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 20 7b 0a 20 20 20 20 20 20 64 72 6f 70 7a 6f 6e 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 64 72 6f 70 7a 6f 6e 65 22 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 64 72 6f 70 7a 6f 6e 65 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 63 68 65 63 6b 45 6c 65 6d 65 6e 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 73 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 2c 20 5f 69 2c 20 5f 6c 65 6e 2c 20 5f 72 65 73 75 6c 74 73 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: pzone, dropzones, _i, _len, _results; if (document.querySelectorAll) { dropzones = document.querySelectorAll(".dropzone"); } else { dropzones = []; checkElements = function(elements) { var el, _i, _len, _results;
2024-12-17 10:52:09 UTC	524	IN	Data Raw: 26 26 20 72 6f 6f 74 2e 64 6f 53 63 72 6f 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 70 20 3d 20 21 77 69 6e 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 5f 65 72 72 6f 72 29 20 7b 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 6f 70 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 6c 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 64 6f 63 5b 61 64 64 5d 28 70 72 65 20 2b 20 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 69 6e 69 74 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 64 6f 63 5b 61 64 64 5d 28 70 72 65 20 2b 20 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 20 69 6e 69 74 2c 20 66 Data Ascii: && root.doScroll) { try { top = !win.frameElement; } catch (_error) {} if (top) { poll(); } } doc[add](pre + "DOMContentLoaded", init, false); doc[add](pre + "readystatechange", init, f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49916	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:08 UTC	709	OUT	POST /decoding_v3.php HTTP/1.1 Host: gomo.to Connection: keep-alive Content-Length: 528 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-token: BnZOF3bhN0VZJnVh9Wb23451037 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://gomo.to Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gomo.to/movie/passengers Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:08 UTC	528	OUT	Data Raw: 74 6f 6b 65 6e 43 6f 64 65 3d 62 58 46 58 62 57 39 68 56 6e 4a 5a 56 30 4e 68 62 33 46 4f 5a 6e 42 78 51 6d 68 73 62 55 64 42 5a 44 4e 61 62 6d 68 48 56 6e 70 74 62 6a 6c 71 5a 6d 31 4c 52 32 35 61 62 58 42 73 56 30 74 77 5a 32 39 58 53 57 78 61 64 56 52 70 53 30 64 6e 62 47 46 34 61 47 45 78 5a 56 52 73 57 6b 64 6b 62 44 5a 6c 57 47 35 58 4f 57 74 79 63 47 31 74 63 47 46 4c 61 32 4a 48 51 6d 68 73 63 43 74 55 62 44 56 58 63 47 31 78 56 31 70 5a 53 6c 4e 6f 62 6d 31 48 56 31 6c 61 55 6d 35 77 52 33 56 56 57 6c 70 68 62 57 34 79 5a 57 39 77 59 54 4a 68 63 47 46 68 61 48 42 58 64 47 68 5a 53 6d 46 6e 62 31 70 57 5a 32 35 61 54 6d 64 73 4d 6b 4e 56 63 54 5a 35 63 57 31 77 54 6e 4a 78 53 6d 6c 72 62 56 64 78 64 57 31 68 59 57 78 76 63 56 4a 7a 57 55 64 48 57 Data Ascii: tokenCode=bXFXbW9hVnJZV0Nhb3FOZnBxQmhsbUdBZDNabmhHVnptbjlqZm1LR25abXBsV0twZ29XSWxadVRpS0dnbGF4aGExZVRsWkdkbDZlWG5XOWtycG1tcGFLa2JHQmhscCtUbDVXcG1xV1pZSlNobm1HV1laUm5wR3VVWlphbW4yZW9wYTJhcGFhaHBXdGhZSmFnb1pWZ25aTmdsMkNVcTZ5cW1wTnJxSmlrbVdxdW1hYWxvcVJzWUdHW
2024-12-17 10:52:09 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:09 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-17 10:52:09 UTC	302	IN	Data Raw: 31 32 37 0d 0a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 68 71 71 2e 74 6f 5c 2f 65 5c 2f 4f 45 45 35 53 33 42 68 4e 31 4d 30 55 6b 68 77 64 30 78 50 54 56 64 69 62 56 70 6e 64 7a 30 39 26 61 64 5f 6c 65 76 65 6c 3d 33 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 65 6d 62 65 64 77 69 73 68 2e 63 6f 6d 5c 2f 65 5c 2f 63 35 73 39 63 33 65 74 6e 35 77 73 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6f 6f 64 2e 6c 61 5c 2f 65 5c 2f 62 7a 7a 79 68 62 39 77 66 73 67 39 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 67 6f 6d 6f 2e 74 6f 5c 2f 76 69 64 31 5c 2f 65 79 4a 30 65 58 42 6c 49 6a 6f 69 62 57 39 32 61 57 55 69 4c 43 4a 70 62 57 51 69 4f 69 4a 30 64 44 45 7a 4e 54 55 32 4e 44 51 69 4c 43 4a 66 49 6a 6f 69 4d 6a 49 79 4e 7a 45 79 4e 7a 49 7a 4e 44 51 7a 4e 7a 45 79 4d 44 67 79 Data Ascii: 127["https:\/\/hqq.to\/e\/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3","https:\/\/embedwish.com\/e\/c5s9c3etn5ws","https:\/\/dood.la\/e\/bzzyhb9wfsg9","https:\/\/gomo.to\/vid1\/eyJ0eXBlIjoibW92aWUiLCJpbWQiOiJ0dDEzNTU2NDQiLCJfIjoiMjIyNzEyNzIzNDQzNzEyMDgy
2024-12-17 10:52:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49918	18.196.145.126	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:09 UTC	518	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:09 UTC	485	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 17 Dec 2024 10:52:09 GMT Set-Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; Path=/; Domain=sharethis.com; Expires=Wed, 17 Dec 2025 10:52:09 GMT; Secure; SameSite=None Set-Cookie: __stidv=2; Path=/; Domain=sharethis.com; Expires=Wed, 17 Dec 2025 10:52:09 GMT; Secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-12-17 10:52:09 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 47 73 41 41 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZGsAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49929	104.21.91.54	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:09 UTC	510	OUT	GET /dtsa.js HTTP/1.1 Host: p.dtsan.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:10 UTC	907	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:10 GMT Content-Type: application/javascript Content-Length: 9716 Connection: close Last-Modified: Wed, 16 Oct 2024 04:56:46 GMT ETag: "670f478e-25f4" Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 4671 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iV%2FecCHcOMbMqLKkumMJcVIrIwFOzhEyw6%2BAmZN8WoguOOebJ3Y2srPm9fz%2FG4yOuvQRWgqUWAB2vmglxfIMZT16kEOH%2Bt4gUiG28OdzI99eQiKnk1UxFlKniv6xRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cb2aa1943bc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2148&min_rtt=2147&rtt_var=807&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1088&delivery_rate=1353732&cwnd=221&unsent_bytes=0&cid=0a152f4a803b740a&ts=447&x=0"
2024-12-17 10:52:10 UTC	462	IN	Data Raw: 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 6e 6f 2d 63 6f 6e 73 6f 6c 65 20 2a 2f 0a 28 28 77 69 6e 64 6f 77 2c 20 6e 61 76 69 67 61 74 6f 72 29 20 3d 3e 20 7b 0a 20 20 63 6f 6e 73 74 20 53 45 43 20 3d 20 31 30 30 30 3b 0a 20 20 63 6f 6e 73 74 20 4d 49 4e 20 3d 20 53 45 43 20 2a 20 36 30 3b 0a 20 20 63 6f 6e 73 74 20 48 4f 55 52 20 3d 20 4d 49 4e 20 2a 20 36 30 3b 0a 20 20 63 6f 6e 73 74 20 44 41 59 20 3d 20 48 4f 55 52 20 2a 20 32 34 3b 0a 0a 20 20 63 6f 6e 73 74 20 73 74 61 74 65 20 3d 20 7b 0a 20 20 20 20 6c 6f 61 64 54 69 6d 65 3a 20 44 61 74 65 2e 6e 6f 77 28 29 2c 0a 20 20 20 20 63 61 70 61 62 69 6c 69 74 69 65 73 3a 20 7b 0a 20 20 20 20 20 20 62 65 61 63 6f 6e 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 75 73 65 72 3a 20 Data Ascii: /* eslint-disable no-console /((window, navigator) => { const SEC = 1000; const MIN = SEC 60; const HOUR = MIN * 60; const DAY = HOUR * 24; const state = { loadTime: Date.now(), capabilities: { beacon: false, }, user:
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 69 6d 65 3a 20 33 30 20 2a 20 44 41 59 2c 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 2d 2d 2d 2d 2d 20 48 45 4c 50 45 52 53 20 2d 2d 2d 2d 2d 2d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 73 74 72 20 3d 20 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2b 20 31 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 6c 69 63 65 28 32 2c 20 31 32 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 60 24 7b 73 74 72 7d 2e 24 7b 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 20 2f 20 31 30 30 30 29 7d 60 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 66 72 69 65 6e 64 6c 79 54 69 6d 65 28 65 6c 61 70 73 65 64 29 20 7b 0a 20 20 20 20 69 66 20 28 65 6c 61 70 73 65 64 20 3c 20 53 45 43 29 20 7b 0a Data Ascii: ime: 30 * DAY, }; // ----- HELPERS ------ function identifier() { const str = (Math.random() + 1).toString(36).slice(2, 12); return `${str}.${Math.floor(Date.now() / 1000)}`; } function friendlyTime(elapsed) { if (elapsed < SEC) {
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 4d 61 63 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 6d 61 63 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 4c 69 6e 75 78 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 6c 69 6e 75 78 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 77 65 62 6f 73 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 77 65 62 6f 73 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 42 72 6f 77 73 65 72 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 75 61 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f Data Ascii: if (ua.match(/Mac/i)) { return 'mac'; } if (ua.match(/Linux/i)) { return 'linux'; } if (ua.match(/webos/i)) { return 'webos'; } return null; } function parseBrowser() { const ua = navigator.userAgent.to
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 65 76 65 6e 74 20 3d 20 7b 0a 20 20 20 20 20 20 74 3a 20 44 61 74 65 2e 6e 6f 77 28 29 2c 0a 20 20 20 20 20 20 6e 3a 20 74 79 70 65 2c 0a 20 20 20 20 20 20 63 3a 20 63 6f 75 6e 74 2c 0a 20 20 20 20 20 20 2e 2e 2e 28 64 61 74 61 20 3f 20 7b 20 64 3a 20 64 61 74 61 20 7d 20 3a 20 7b 7d 29 2c 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 73 74 61 74 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 65 76 65 6e 74 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 2d 2d 2d 2d 2d 20 53 54 4f 52 41 47 45 20 2d 2d 2d 2d 2d 2d 0a 20 20 63 6f 6e 73 74 20 73 74 6f 72 61 67 65 20 3d 20 7b 0a 20 20 20 20 62 61 73 65 4b 65 79 3a 20 27 64 74 73 61 27 2c 0a 20 20 20 20 62 75 69 6c 64 4b 65 79 3a 20 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 Data Ascii: = null) { const event = { t: Date.now(), n: type, c: count, ...(data ? { d: data } : {}), }; state.events.push(event); } // ----- STORAGE ------ const storage = { baseKey: 'dtsa', buildKey: function(key)
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 20 20 7d 0a 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 4f 62 6a 20 3d 20 62 61 73 65 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 6b 65 79 4f 62 6a 2e 65 20 3c 20 44 61 74 65 2e 6e 6f 77 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 64 65 6c 65 74 65 20 62 61 73 65 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 74 42 61 73 65 28 62 61 73 65 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6b 65 79 4f 62 6a 2e 76 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 63 6c 65 61 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 68 69 73 2e 62 61 73 65 4b 65 79 29 3b 0a Data Ascii: } const keyObj = base[key]; if (keyObj.e < Date.now()) { delete base[key]; this.setBase(base); return null; } return keyObj.v; }, clear: function() { localStorage.removeItem(this.baseKey);
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 73 73 53 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 20 20 73 74 6f 72 61 67 65 2e 73 65 74 28 27 74 53 65 73 73 4c 27 2c 20 73 74 61 74 65 2e 75 73 65 72 2e 74 53 65 73 73 4c 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 20 20 73 74 6f 72 61 67 65 2e 73 65 74 28 27 70 76 73 27 2c 20 73 74 61 74 65 2e 75 73 65 72 2e 70 76 73 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 53 65 73 73 69 6f 6e 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 74 73 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 20 20 20 20 73 74 61 74 65 2e 75 73 65 72 2e 74 43 75 72 72 Data Ascii: ssS, config.sessionStorageTime); storage.set('tSessL', state.user.tSessL, config.sessionStorageTime); storage.set('pvs', state.user.pvs, config.sessionStorageTime); } function resolveSession() { const ts = Date.now(); state.user.tCurr
2024-12-17 10:52:10 UTC	1369	IN	Data Raw: 61 20 73 65 73 73 69 6f 6e 20 6d 65 74 72 69 63 73 0a 20 20 20 20 20 20 20 20 20 20 73 74 61 74 65 2e 75 73 65 72 2e 70 76 73 20 3d 20 73 74 6f 72 61 67 65 2e 67 65 74 28 27 70 76 73 27 29 20 7c 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 69 73 4e 65 77 29 20 7b 0a 20 20 20 20 20 20 63 72 65 61 74 65 4e 65 77 53 65 73 73 69 6f 6e 28 74 73 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 73 28 29 20 7b 0a 20 20 20 20 69 66 20 28 73 74 61 74 65 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 64 65 62 75 67 4d 65 73 73 61 67 65 28 27 69 6e 66 6f 27 2c 20 27 6e 6f 20 65 76 65 6e 74 73 20 74 6f 20 Data Ascii: a session metrics state.user.pvs = storage.get('pvs') \|\| 0; } } } if (isNew) { createNewSession(ts); } } function sendEvents() { if (state.events.length === 0) { debugMessage('info', 'no events to
2024-12-17 10:52:10 UTC	1040	IN	Data Raw: 74 69 6d 65 20 61 6e 64 20 63 6f 75 6e 74 20 74 6f 20 6e 6f 72 6d 61 6c 69 7a 65 20 61 63 72 6f 73 73 20 68 6f 75 72 73 2c 0a 20 20 20 20 20 20 20 20 20 2a 20 6f 6e 6c 79 20 73 65 6e 64 20 6f 6e 20 74 68 65 20 66 69 72 73 74 20 6c 6f 73 73 20 6f 66 20 76 69 73 69 62 69 6c 69 74 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 68 61 73 45 76 65 6e 74 42 65 65 6e 53 65 6e 74 28 27 70 76 6c 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 45 76 65 6e 74 28 27 70 76 6c 27 2c 20 28 44 61 74 65 2e 6e 6f 77 28 29 20 2d 20 73 74 61 74 65 2e 75 73 65 72 2e 74 50 76 53 29 20 2f 20 31 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 45 76 65 6e 74 28 27 70 76 6c 63 27 29 3b 0a 20 20 Data Ascii: time and count to normalize across hours, * only send on the first loss of visibility on the page */ if (!hasEventBeenSent('pvl')) { logEvent('pvl', (Date.now() - state.user.tPvS) / 1000); logEvent('pvlc');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49932	104.26.12.60	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	827	OUT	GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:10 UTC	1038	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:10 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=51A0173443272670518C9622FCF8D1A8; Domain=dtscdn.com; Expires=Sat, 14-Jun-2025 10:52:16 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 22.16 Expires: Tue, 17 Dec 2024 10:52:15 GMT Cache-Control: no-cache x-server: web2.ny1.dtscdn.com cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eY0w4mFfVDa8RZpVwaXlqyVddxXSWDas%2B%2Fdx2Uh9kpMDWfiVIZpott%2FUQ0r%2FxSFE5Igi1u%2Fju3agnORzsTpAj1eN62rCCYwhjsJRSkk9wZN07wqTSDhayGMnsFsFfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cb66d54c434-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1573&min_rtt=1524&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1405&delivery_rate=1916010&cwnd=196&unsent_bytes=0&cid=cbbaaf357a2c0a0b&ts=474&x=0"
2024-12-17 10:52:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49931	54.39.128.162	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	752	OUT	GET /stats/0.php?4329689&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mPassengers%20-%20PutStream&@n0&@ohttps%3A%2F%2Falluc.co%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:192497717&@b3:1734432728&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gomo.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:10 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:51:47 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 381 Connection: close
2024-12-17 10:52:10 UTC	381	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 31 30 37 39 36 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 Data Ascii: _HST_cntval="#3Vis. today=10796";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49937	141.101.120.10	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	503	OUT	GET /pv/?_a=v&_h=alluc.co&_ss=2lq4lwb89r&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=128n&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=2; st=2
2024-12-17 10:52:11 UTC	841	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.135 X-C: 0 Expires: Tue, 17 Dec 2024 10:52:09 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQcYXD2mtKON3kyyDLFl5NpNQ151vFxqezPZFgyVpazddyI%2F0Pb7tIfZ9kIW1UP4LbYeIVD18QsMxy8f0%2Ba%2FV5TSheQ6pr%2B7EWMUd%2Bn2bUFXrtAudMlrggRysyb9Sb0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cb78ce67c6c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1993&min_rtt=1982&rtt_var=766&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1081&delivery_rate=1407907&cwnd=189&unsent_bytes=0&cid=09dfe42ea7fe92f7&ts=608&x=0"
2024-12-17 10:52:11 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 31 32 38 6e 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'128n');}catch(e){}
2024-12-17 10:52:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49935	54.38.113.6	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	630	OUT	GET /?partner=137085098&mapped=51A0173443272670518C9622FCF8D1A8 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=537102118bb9c575; Max-Age=31536000; Expires=Wed, 17 Dec 2025 10:52:10 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Wed, 18 Dec 2024 10:52:10 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=537102118bb9c575 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49939	67.202.105.31	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	1143	OUT	GET /b/p?id=wu!&lm=0&ts=1734432728201&dn=AFWU&iso=0&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&t=Watch%20Passengers%20Online%20Free&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1 Host: ic.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	750	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Tue, 17 Dec 2024 10:52:11 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" set-cookie: uid=CoIKSGdhV9uxfyz0BEhkAg==; expires=Wed, 17-Dec-25 10:52:11 GMT; domain=tynt.com; path=/; Secure; SameSite=None p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-12-17 10:52:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49941	18.196.145.126	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	787	OUT	GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.282460356599068&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
2024-12-17 10:52:11 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 17 Dec 2024 10:52:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-12-17 10:52:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49943	67.202.105.32	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	1026	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1 Host: de.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	835	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=k3eNWWdhV9sHOLzCRlkrhQ==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure set-cookie: pids=%5B%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A4%2C%22ts%22%3A1734432731180%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1734432731180%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 1333 date: Tue, 17 Dec 2024 10:52:10 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-12-17 10:52:11 UTC	1333	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 65 2e 64 6c 78 2e 61 64 64 74 68 69 73 2e 63 6f 6d 2f 65 2f 61 2d 31 35 34 39 2f 73 2d 33 32 36 31 3f 67 75 69 64 3d 77 75 25 32 31 26 33 33 72 61 6e 64 6f 6d 3d 31 37 33 34 34 33 32 37 33 31 31 38 30 2e 31 22 2c 22 68 74 74 70 73 3a 2f 2f 69 2e 73 69 6d 70 6c 69 2e 66 69 2f 64 70 78 3f 63 69 64 3d 31 31 34 31 31 26 75 73 5f 70 72 69 76 61 63 79 3d 26 33 33 72 61 6e 64 6f 6d 3d 31 37 33 34 34 33 32 37 33 31 31 38 30 2e 32 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 6c 6c 75 63 2e 63 6f 25 32 46 77 61 74 63 68 2d 6d 6f 76 69 65 73 25 32 46 70 61 73 73 65 6e Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://e.dlx.addthis.com/e/a-1549/s-3261?guid=wu%21&33random=1734432731180.1","https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1734432731180.2&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49933	108.139.60.56	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:10 UTC	529	OUT	GET /lt/c/3825/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 63965 Connection: close Date: Tue, 17 Dec 2024 09:17:06 GMT Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "2afd7a7856345176e1c9c378191ae043" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f150b5c4cf1ad37a4d1edf2f74f92616.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DXB52-P2 X-Amz-Cf-Id: AAH_cVlIj29Euncbt47vazOTVn1IpjQ_cF2Z4-0E_EWL_Fan0z9A-A== Age: 5706
2024-12-17 10:52:11 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-12-17 10:52:11 UTC	16384	IN	Data Raw: 6c 74 33 38 32 35 5f 70 3d 5b 22 45 4d 41 49 4c 22 2c 22 45 45 22 2c 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 71 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 74 68 69 73 2e 49 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 61 3d 21 31 3b 69 66 28 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 29 7b 76 61 72 20 62 3d 21 31 3b 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 62 6f 74 68 20 27 69 64 27 20 61 6e 64 20 27 74 Data Ascii: lt3825_p=["EMAIL","EE","EMAIL_SHA256"]; function lt3825_q(a){a=void 0===a?{}:a;this.Ia=null;this.sa=!1;if(a&&lt3825_r(a)){var b=!1;a&&lt3825_r(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?lt3825_.error("id object must contain both 'id' and 't
2024-12-17 10:52:11 UTC	16384	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 65 77 20 6c 74 33 38 32 35 5f 57 61 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 73 68 6f 75 6c 64 50 65 72 66 6f 72 6d 41 75 64 69 65 6e 63 65 45 78 74 72 61 63 74 69 6f 6e 20 28 22 2b 61 2b 22 29 20 73 68 6f 75 6c 64 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 3a 62 2e 6b 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 59 61 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 2d 31 21 3d 3d 63 26 26 28 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 29 3b 61 2e 6a 62 3d 62 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {var b=new lt3825_Wa;"boolean"!==typeof a?lt3825_.error("shouldPerformAudienceExtraction ("+a+") should be a boolean"):b.kb=a;return b}function lt3825_Ya(a){var b=window.location.href,c=b.indexOf("?");-1!==c&&(b=b.substring(0,c));a.jb=b;return a}function
2024-12-17 10:52:12 UTC	14813	IN	Data Raw: 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f 5b 5e 3e 5d 2b 5c 2f 3f 3e 2f 67 69 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 7c 5c 74 7c 5c 72 2f 67 69 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7b 32 2c 7d 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 71 75 6f 74 65 5c 5d 5b 5c 73 5c 53 5d 2a 5c 5b 5c 2f 71 75 6f 74 65 5c 5d 2f 67 69 2c 22 22 29 3b 74 72 79 7b 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 4b 62 3f 6c 74 33 38 32 35 5f 4d 62 28 61 2c 62 29 3a 6c 74 33 38 32 35 5f 4e 62 28 61 2c 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 Data Ascii: a=a.replace(/<\/?[^>]+\/?>/gi,"").replace(/\n\|\t\|\r/gi," ").replace(/\s{2,}/g," ").replace(/\[quote\][\s\S]*\[\/quote\]/gi,"");try{a=decodeURIComponent(a)}catch(b){}return a}function lt3825_Ib(a,b){return b.Kb?lt3825_Mb(a,b):lt3825_Nb(a,b)} function lt382

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49944	18.196.145.126	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:11 UTC	402	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
2024-12-17 10:52:11 UTC	233	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 17 Dec 2024 10:52:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-12-17 10:52:11 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 47 73 41 41 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZGsAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49940	31.42.184.242	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:11 UTC	346	OUT	GET /decoding_v3.php HTTP/1.1 Host: gomo.to Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	228	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:11 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips X-Powered-By: PHP/7.4.33 Vary: User-Agent Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49946	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:11 UTC	529	OUT	OPTIONS /report/v4?s=kQfwt7Pk%2Ba%2BC12%2FIbRzQYobQeLLiq4VMygEl9jJQ0DpqgAPGfTqALr%2BvJCDAz9HFmoknivAkM2WJF%2F9xanEKgCztgNjr7kdQ8pHNmxinF%2B6acx3FEkrWaIilvg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://alluc.co Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 17 Dec 2024 10:52:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49942	190.115.19.71	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:11 UTC	705	OUT	GET /e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3 HTTP/1.1 Host: hqq.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gomo.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:11 UTC	1706	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Robots-Tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex' X-content-type-options: nosniff X-XSS-Protection: 1; mode=block; P3P: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR" link: <//hqq.to>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//wss.commentsmodule.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//a.labadena.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin Pragma: no-cache X-Origin-Location: player Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 server: Google Frontend X-Cache-Status-Inferno: MISS X-Inferno-Location: player X-Inferno-Limit-Req: PASSED
2024-12-17 10:52:11 UTC	2390	IN	Data Raw: 33 31 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 76 69 64 65 6f 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 76 69 64 65 6f 23 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 20 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 69 66 28 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 21 3d 20 27 64 69 76 78 70 6c 61 79 65 72 2e 6d 6c 27 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 21 3d 20 27 61 6b 70 64 6d 2e 74 6f 70 27 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: 31c6<!DOCTYPE html><html lang="en-US" prefix="og: http://ogp.me/ns# video: http://ogp.me/ns/video#" data-cast-api-enabled="true" ><head><script>if((window.location.hostname != 'divxplayer.ml' && window.location.hostname != 'akpdm.top' && window.loc
2024-12-17 10:52:11 UTC	4096	IN	Data Raw: 65 78 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 7d 0a 64 69 76 20 5b 63 6c 61 73 73 5e 3d 59 74 79 75 72 75 70 69 73 74 7a 5d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 64 69 76 20 5b 63 6c 61 73 73 5e 3d 54 62 5f 5d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 64 69 76 20 5b 63 6c 61 73 73 5e 3d 59 74 47 72 65 65 64 5d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 64 69 76 20 5b 63 6c 61 73 73 5e 3d 59 74 78 74 72 65 6d 65 7a 5d 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 62 6f 64 79 2e 6c 6f 61 64 65 72 Data Ascii: ext-color:#fff;}div [class^=Ytyurupistz]{ position: fixed !important;}div [class^=Tb_]{ position: fixed !important;}div [class^=YtGreed]{ position: fixed !important;}div [class^=Ytxtremez]{ position: fixed !important;}body.loader
2024-12-17 10:52:11 UTC	4096	IN	Data Raw: 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e 0a 69 66 20 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 21 3d 3d 20 27 68 74 74 70 73 3a 27 29 20 7b 0a 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 75 62 73 74 72 69 6e 67 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2e 6c 65 6e 67 74 68 29 29 3b 0a 7d 0a 20 20 20 20 76 61 72 20 6e 65 77 5f 61 64 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 76 61 72 20 66 75 63 6b 41 64 42 6c 6f 63 6b 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 76 61 72 20 69 73 70 6f 72 6e 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 77 61 73 5f 63 6c 69 Data Ascii: script><script data-cfasync="false">if (location.protocol !== 'https:') { location.replace("https:"+location.href.substring(location.protocol.length));} var new_ad = true; var fuckAdBlock = undefined; var isporn = false; var was_cli
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 6c 6f 61 64 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 69 6e 67 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 45 72 72 6f 72 20 6f 6e 6c 6f 64 3a 20 27 2b 65 2e 6d 65 73 73 61 67 65 29 7d 0a 20 20 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6c 69 63 6b 6a 22 20 73 74 79 6c 65 3d 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 70 61 63 69 74 79 3a 20 31 3b 6d 69 6e 2d 77 69 64 74 68 3a 20 32 30 30 70 78 3b 6d 69 6e 2d Data Ascii: loading) { loading.style.display = 'none'; } } catch(e) {console.log('Error onlod: '+e.message)} };</script><div id="clickj" style="pointer-events: none;overflow: hidden;background-color: transparent;opacity: 1;min-width: 200px;min-
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 63 3d 22 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 6a 73 2f 61 64 73 62 79 67 6f 6f 67 6c 65 2e 6a 73 22 20 6f 6e 65 72 72 6f 72 3d 22 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 61 64 62 3a 20 63 61 6e 74 20 6c 6f 61 64 20 61 64 73 62 79 67 6f 6f 67 6c 65 2c 20 61 64 62 6c 6f 63 6b 63 68 65 63 6b 3d 74 72 75 65 3b 27 29 3b 61 64 62 6c 6f 63 6b 63 68 65 63 6b 20 3d 20 74 72 75 65 3b 63 61 6e 74 4f 70 65 6e 57 69 6e 64 6f 77 73 3d 74 72 75 65 3b 22 20 6f 6e 6c 6f 61 64 3d 22 61 64 62 6c 6f 63 6b 63 68 65 63 6b 20 3d 20 66 61 6c 73 65 3b 63 61 6e 74 4f 70 65 6e 57 69 6e 64 6f 77 73 3d 66 61 6c 73 65 3b 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: c="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js" onerror="console.log('adb: cant load adsbygoogle, adblockcheck=true;');adblockcheck = true;cantOpenWindows=true;" onload="adblockcheck = false;cantOpenWindows=false;"></script><img src="https:/
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 5f 6f 6e 63 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 6c 6f 61 64 5f 6f 6e 63 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 65 76 65 6e 74 20 6c 6f 61 64 27 29 3b 0a 20 20 20 20 69 66 28 61 64 62 6c 6f 63 6b 63 68 65 63 6b 29 7b 0a 20 20 20 20 20 20 20 20 52 6d 69 47 41 50 6d 28 27 36 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 2f 2f 69 66 28 74 79 70 65 6f 66 20 42 65 74 74 65 72 4a 73 50 6f 70 2e 63 68 65 63 6b 53 74 61 63 6b 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 0a 20 20 20 20 2f 2f 20 20 20 20 52 6d 69 47 41 50 6d 28 27 39 27 29 3b 0a 20 20 20 20 2f 2f 7d 0a 20 20 20 20 73 6f 6d 65 46 75 6e 63 74 69 Data Ascii: _once) return true; load_once = true; console.log('event load'); if(adblockcheck){ RmiGAPm('6'); } //if(typeof BetterJsPop.checkStack == 'undefined'){ // RmiGAPm('9'); //} someFuncti
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 33 43 64 69 76 2b 69 64 25 33 44 25 32 32 30 37 62 30 32 32 30 37 36 30 32 32 30 33 61 30 32 32 30 34 37 30 35 39 30 35 37 30 33 37 30 37 32 30 34 34 30 33 36 30 36 64 30 33 38 30 36 34 30 36 62 30 33 33 30 32 32 30 37 64 25 32 32 2b 73 74 79 6c 65 25 33 44 25 32 32 68 65 69 67 68 74 25 33 41 34 35 30 70 78 25 33 42 77 69 64 74 68 25 33 41 37 32 30 70 78 25 32 32 25 33 45 25 33 43 25 32 46 64 69 76 25 33 45 25 33 43 73 63 72 69 70 74 2b 64 61 74 61 2d 63 66 61 73 79 6e 63 25 33 44 25 32 32 66 61 6c 73 65 25 32 32 2b 73 72 63 25 33 44 25 32 32 64 61 74 61 25 33 41 74 65 78 74 25 32 46 6a 61 76 61 73 63 72 69 70 74 25 33 42 62 61 73 65 36 34 25 32 43 64 6d 46 79 49 48 42 68 49 44 30 67 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c Data Ascii: 3Cdiv+id%3D%2207b02207602203a02204705905703707204403606d03806406b03302207d%22+style%3D%22height%3A450px%3Bwidth%3A720px%22%3E%3C%2Fdiv%3E%3Cscript+data-cfasync%3D%22false%22+src%3D%22data%3Atext%2Fjavascript%3Bbase64%2CdmFyIHBhID0gZG9jdW1lbnQuY3JlYXRlRWxl
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 5a 30 49 44 49 77 4d 44 4d 74 4d 6a 41 78 4f 43 41 74 49 47 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 6d 6c 6b 5a 57 39 73 59 57 34 75 62 33 4a 6e 4c 33 67 79 4e 6a 51 75 61 48 52 74 62 43 41 74 49 47 39 77 64 47 6c 76 62 6e 4d 36 49 47 4e 68 59 6d 46 6a 50 54 45 67 63 6d 56 6d 50 54 4d 67 5a 47 56 69 62 47 39 6a 61 7a 30 78 4f 6a 41 36 4d 43 42 68 62 6d 46 73 65 58 4e 6c 50 54 42 34 4d 7a 6f 77 65 44 45 78 4d 79 42 74 5a 54 31 6f 5a 58 67 67 63 33 56 69 62 57 55 39 4e 79 42 77 63 33 6b 39 4d 53 42 77 63 33 6c 66 63 6d 51 39 4d 53 34 77 4d 44 6f 77 4c 6a 41 77 49 47 31 70 65 47 56 6b 58 33 4a 6c 5a 6a 30 78 49 47 31 6c 58 33 4a 68 62 6d 64 6c 50 54 45 32 49 47 4e 6f 63 6d 39 74 59 56 39 74 5a 54 30 78 49 48 52 79 5a 57 78 73 61 58 4d 39 4d 53 41 34 65 Data Ascii: Z0IDIwMDMtMjAxOCAtIGh0dHA6Ly93d3cudmlkZW9sYW4ub3JnL3gyNjQuaHRtbCAtIG9wdGlvbnM6IGNhYmFjPTEgcmVmPTMgZGVibG9jaz0xOjA6MCBhbmFseXNlPTB4MzoweDExMyBtZT1oZXggc3VibWU9NyBwc3k9MSBwc3lfcmQ9MS4wMDowLjAwIG1peGVkX3JlZj0xIG1lX3JhbmdlPTE2IGNocm9tYV9tZT0xIHRyZWxsaXM9MSA4e
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 69 70 74 3e 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e 0a 0a 20 20 20 20 76 61 72 20 77 61 73 70 6f 70 70 6c 61 79 65 69 6e 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 76 74 74 5f 6c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 74 65 5f 74 72 61 63 6b 28 29 7b 0a 20 20 20 20 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 46 61 69 6c 65 64 20 6c 6f 61 64 20 73 75 62 73 3a 20 27 2b 65 2e 6d 65 73 73 61 67 65 29 3b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d Data Ascii: ipt><script data-cfasync="false"> var waspopplayein = false, vtt_loaded = false; function remote_track(){ try{ }catch(e){console.log('Failed load subs: '+e.message);} } </script><script data-
2024-12-17 10:52:12 UTC	4096	IN	Data Raw: 6d 6c 27 29 2e 63 73 73 28 7b 27 74 6f 70 27 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2a 6d 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 68 74 6d 6c 27 29 2e 63 73 73 28 7b 27 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 27 3a 20 27 30 20 30 27 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 68 74 6d 6c 27 29 2e 63 73 73 28 7b 27 74 72 61 6e 73 66 6f 72 6d 27 3a 20 27 73 63 61 6c 65 28 27 2b 6e 2b 27 2c 27 2b 6e 2b 27 29 27 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 78 20 3d 20 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2f 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 2e 74 6f 46 69 78 65 64 28 32 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: ml').css({'top':document.body.scrollHeight*m}); } $('html').css({'transform-origin': '0 0'}); $('html').css({'transform': 'scale('+n+','+n+')'}); var x = (window.innerHeight/scrollHeight).toFixed(2);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49948	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:11 UTC	523	OUT	OPTIONS /report/v4?s=7oUBvHR2ZJ5YDjz9Wqs4%2Fm%2Fdp5feJYYxL0WpOYgSvqwYfDubg%2FTpRVaxHE2bdOijb8kynTLvNCmKGsRw4rACfAywHGQ6HyFsLNZrR6ogJzCmLzNftl3vS2k7qg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://alluc.co Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 17 Dec 2024 10:52:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49951	141.101.120.10	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	670	OUT	GET /e/?v=1a&pid=5200&site=1&l=https%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&j=https%3A%2F%2Falluc.co%2F HTTP/1.1 Host: e.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gomo.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: df=1734432726; l=51A0173443272670518C9622FCF8D1A8; m=2; st=2
2024-12-17 10:52:12 UTC	1234	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: ger1 Set-Cookie: m=3; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 12:15:32 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=3; Domain=dtscout.com; Expires=Tue, 17-Dec-2024 11:52:12 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: l=51A0173443272670518C9622FCF8D1A8; Domain=dtscout.com; Expires=Sat, 15-Mar-2025 10:52:12 GMT; Max-Age=7603200; Path=/; SameSite=None; Secure X-T: 0.328 Expires: Tue, 17 Dec 2024 10:52:11 GMT Cache-Control: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1nK04wOrnGSN2tc6n8DTzrIDl6WGDGzXGiGVhID0y9WhkXbHGlZoUV2jMboN5Q6MBd7L0MzGl0wbNP6TW0aiPcUwYiyfuZcAfZ6dy12larAIxTzWomxHRIVTRDB4%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cc1e94742d0-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1647&min_rtt=1645&rtt_var=621&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1248&delivery_rate=1754807&cwnd=207&unsent_bytes=0&cid=85bb7968ed523584&ts=626&x=0"
2024-12-17 10:52:12 UTC	135	IN	Data Raw: 32 30 39 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 22 35 31 41 30 31 37 33 34 34 33 32 37 32 36 37 30 35 31 38 43 39 36 32 32 46 43 46 38 44 31 41 38 22 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 35 31 41 30 31 37 33 34 34 33 32 37 33 32 34 44 42 36 31 32 35 42 42 32 39 31 46 41 34 42 42 30 22 3b 0a Data Ascii: 2095(function() { var dc = {}; var gu = "51A0173443272670518C9622FCF8D1A8"; var su = "51A017344327324DB6125BB291FA4BB0";
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 73 68 3d 30 3b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 30 29 72 65 74 75 72 6e 20 68 61 73 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 68 61 72 3d 74 68 69 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b Data Ascii: var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 76 61 72 20 74 65 6d 70 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 70 28 74 65 6d 70 2e 75 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 6d 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f Data Ascii: var temp = JSON.parse(e.data); lp(temp.u); gm = true; } } }); try { var i = document.createElement('iframe'); i.src = "https://t.dtscout.com/idg/?
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 3b 6a 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 74 61 72 67 65 74 29 20 7b 20 74 72 79 7b 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 74 61 72 67 65 74 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 29 28 29 3b 76 61 72 20 64 74 73 5f 70 69 5f 73 74 72 3d 22 22 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 74 73 5f 70 69 5f 73 74 72 2b 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 5b 69 5d Data Ascii: one";document.getElementsByTagName("body")[0].appendChild(j);j.onload=function(e){if(e.target) { try{e.target.parentNode.removeChild(e.target);}catch(e){}}}})();var dts_pi_str="";for(var i=0;i<navigator.plugins.length;i++){dts_pi_str+=navigator.plugins[i]
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 73 63 28 6e 2c 76 2c 64 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 20 2d 20 32 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 73 6c 69 63 65 28 69 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 Data Ascii: } return d } function __sc(n,v,d) { var splitHostname = window.location.hostname.split('.'); for (var i = splitHostname.length - 2; i >= 0; i--) { var ch = splitHostname.slice(i).join('.'); __s
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 63 74 28 6c 69 6a 69 74 44 61 74 61 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 77 69 6e 64 6f 77 2c 20 22 6c 6f 63 61 74 69 6f 6e 22 29 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 64 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 70 64 2f 64 74 73 63 6f 75 74 22 3b 73 2e 69 64 3d 22 73 74 70 64 2d 64 74 73 63 6f 75 74 22 3b 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 28 29 3b 28 66 Data Ascii: ct(lijitData, document, window, "location");})();(function(){try{var s=document.createElement("script");s.src="https://pd.sharethis.com/pd/dtscout";s.id="stpd-dtscout";s.async=true;document.getElementsByTagName("body")[0].appendChild(s);}catch(e){}})();(f
2024-12-17 10:52:12 UTC	1369	IN	Data Raw: 64 2e 70 76 3d 30 2c 75 2e 73 3d 31 29 2c 64 2e 70 76 2b 2b 2c 64 2e 73 6c 3d 63 2c 75 2e 73 73 3d 64 2e 73 73 2c 75 2e 70 76 3d 64 2e 70 76 2c 75 2e 6c 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 63 2d 64 2e 73 74 29 2c 28 73 7c 7c 63 3e 64 2e 75 31 2b 38 36 34 30 30 29 26 26 28 64 2e 75 31 3d 63 2c 75 2e 75 31 3d 31 29 2c 28 73 7c 7c 63 3e 64 2e 75 33 2b 32 35 39 32 65 33 29 26 26 28 64 2e 75 33 3d 63 2c 75 2e 75 33 3d 31 29 2c 66 28 64 29 2c 64 2e 63 29 75 5b 76 5d 3d 64 2e 63 5b 76 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 63 62 69 64 3d 70 28 34 29 2c 74 2e 63 62 3d 22 5f 64 74 73 70 76 2e 63 22 3b 76 61 72 20 65 3d 67 28 74 29 3b 74 72 79 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 Data Ascii: d.pv=0,u.s=1),d.pv++,d.sl=c,u.ss=d.ss,u.pv=d.pv,u.ls=Math.round(c-d.st),(s\|\|c>d.u1+86400)&&(d.u1=c,u.u1=1),(s\|\|c>d.u3+2592e3)&&(d.u3=c,u.u3=1),f(d),d.c)u[v]=d.c[v];!function(t){t.cbid=p(4),t.cb="_dtspv.c";var e=g(t);try{var n=document.createElement("scrip
2024-12-17 10:52:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49952	104.26.12.60	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	705	OUT	GET /widget/?d=51A0173443272670518C9622FCF8D1A8&nid=300&p=2114454483&t=300&s=1280x1024x24&u=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=51A0173443272670518C9622FCF8D1A8
2024-12-17 10:52:12 UTC	1034	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:12 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=51A0173443272670518C9622FCF8D1A8; Domain=dtscdn.com; Expires=Sat, 14-Jun-2025 09:51:09 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 1.15 Expires: Tue, 17 Dec 2024 09:51:08 GMT Cache-Control: no-cache x-server: web12.ny1.dtscdn.com cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhA2A1Kr0%2FpuJMYdXYUmuTWpXtIgONzlYXna8KKxfA7jD45iuvjWHUhhtd3pqXbwx7jqG3P2XDNRZD2LlWaah%2FB0kZhoZO3MvnFYQUU%2BSRxJUnYWDRFQKDVtJvbZgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cc1ec2b0f42-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1569&min_rtt=1567&rtt_var=593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1283&delivery_rate=1836477&cwnd=180&unsent_bytes=0&cid=e032851b393fc544&ts=451&x=0"
2024-12-17 10:52:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49949	149.56.240.129	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	585	OUT	GET /stats/0.php?4329689&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mPassengers%20-%20PutStream&@n0&@ohttps%3A%2F%2Falluc.co%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:192497717&@b3:1734432728&@b4:js15_as.js&@b5:-300&@a-_0.2.1&@vhttps%3A%2F%2Fgomo.to%2Fmovie%2Fpassengers&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:12 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 381 Connection: close
2024-12-17 10:52:12 UTC	381	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 31 30 37 39 36 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 Data Ascii: _HST_cntval="#3Vis. today=10796";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49955	104.22.50.98	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	600	OUT	GET /?zdid=1332&zcluid=537102118bb9c575 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:12 UTC	1120	IN	HTTP/1.1 302 Found Date: Tue, 17 Dec 2024 10:52:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://alluc.co location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=537102118bb9c575&zdid=1332 Set-Cookie: zc=b05b22a9-d722-433a-6b24-a0aff3d6777f; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure Set-Cookie: zsc=%113%9BN%A6%032%01%8E%C2%04%FA%BE%7C%AC%09%F4%E3bQ%9A%2F%8C%7Cg%AEC%1E%E6%C2%D0%C8%C8%3Fso%D6%93%05W%D7%7F%E0%C9%D3H%86K+i%E7%128%B8uP%0Da%CCQ%AB%00%3A%C6%91kC%DD%90%8An%ACg%CE%3D%F0%C8%8Bz%5D%88%82h; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google cf-cache-status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f365cc3bacbc346-EWR
2024-12-17 10:52:12 UTC	249	IN	Data Raw: 31 31 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6f 74 61 70 5f 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 7a 70 61 72 74 6e 65 72 69 64 3d 31 26 61 6d 70 3b 65 6e 76 3d 6d 57 65 62 26 61 6d 70 3b 65 76 65 6e 74 54 79 70 65 3d 6d 61 70 26 61 6d 70 3b 69 64 5f 6d 69 64 5f 34 3d 62 30 35 62 32 32 61 39 2d 64 37 32 32 2d 34 33 33 61 2d 36 62 32 34 2d 61 30 61 66 66 33 64 36 37 37 37 66 26 61 6d 70 3b 72 65 71 49 64 3d 35 39 62 30 61 62 35 36 2d 32 30 32 34 2d 34 30 38 62 2d 35 65 32 65 2d 34 64 36 38 31 37 64 32 64 34 66 38 26 61 6d 70 3b 7a 63 6c 75 69 64 3d 35 33 37 31 30 32 31 31 Data Ascii: 118<a href="https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=b05b22a9-d722-433a-6b24-a0aff3d6777f&reqId=59b0ab56-2024-408b-5e2e-4d6817d2d4f8&zcluid=53710211
2024-12-17 10:52:12 UTC	38	IN	Data Raw: 38 62 62 39 63 35 37 35 26 61 6d 70 3b 7a 64 69 64 3d 31 33 33 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 8bb9c575&zdid=1332">Found</a>.
2024-12-17 10:52:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49956	67.202.105.31	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	925	OUT	GET /b/p?id=wu!&lm=0&ts=1734432728201&dn=AFWU&iso=0&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&t=Watch%20Passengers%20Online%20Free&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117 HTTP/1.1 Host: ic.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=CoIKSGdhV9uxfyz0BEhkAg==
2024-12-17 10:52:13 UTC	562	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Tue, 17 Dec 2024 10:52:12 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-12-17 10:52:13 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49959	104.21.91.54	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	342	OUT	GET /dtsa.js HTTP/1.1 Host: p.dtsan.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	908	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: application/javascript Content-Length: 9716 Connection: close Last-Modified: Wed, 16 Oct 2024 04:56:46 GMT ETag: "670f478e-25f4" Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 4674 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JomeiAwmzFFhGfLF09N7QIUBcTjsaAJwH%2BVkztB0sgR%2BaBProd6Vj0TbOPWjK9%2BfSEWj%2BVy0SCyLdcVqjuGAvu6wCmuyJ3ylfRb5C3pSX0%2FQNm0yqiAKGiiwutKwdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f365cc58f0441a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1763&min_rtt=1759&rtt_var=668&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=920&delivery_rate=1628555&cwnd=239&unsent_bytes=0&cid=f68a42b79d21d792&ts=448&x=0"
2024-12-17 10:52:13 UTC	461	IN	Data Raw: 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 6e 6f 2d 63 6f 6e 73 6f 6c 65 20 2a 2f 0a 28 28 77 69 6e 64 6f 77 2c 20 6e 61 76 69 67 61 74 6f 72 29 20 3d 3e 20 7b 0a 20 20 63 6f 6e 73 74 20 53 45 43 20 3d 20 31 30 30 30 3b 0a 20 20 63 6f 6e 73 74 20 4d 49 4e 20 3d 20 53 45 43 20 2a 20 36 30 3b 0a 20 20 63 6f 6e 73 74 20 48 4f 55 52 20 3d 20 4d 49 4e 20 2a 20 36 30 3b 0a 20 20 63 6f 6e 73 74 20 44 41 59 20 3d 20 48 4f 55 52 20 2a 20 32 34 3b 0a 0a 20 20 63 6f 6e 73 74 20 73 74 61 74 65 20 3d 20 7b 0a 20 20 20 20 6c 6f 61 64 54 69 6d 65 3a 20 44 61 74 65 2e 6e 6f 77 28 29 2c 0a 20 20 20 20 63 61 70 61 62 69 6c 69 74 69 65 73 3a 20 7b 0a 20 20 20 20 20 20 62 65 61 63 6f 6e 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 7d 2c 0a 20 20 20 20 75 73 65 72 3a 20 Data Ascii: /* eslint-disable no-console /((window, navigator) => { const SEC = 1000; const MIN = SEC 60; const HOUR = MIN * 60; const DAY = HOUR * 24; const state = { loadTime: Date.now(), capabilities: { beacon: false, }, user:
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 54 69 6d 65 3a 20 33 30 20 2a 20 44 41 59 2c 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 2d 2d 2d 2d 2d 20 48 45 4c 50 45 52 53 20 2d 2d 2d 2d 2d 2d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 73 74 72 20 3d 20 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2b 20 31 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 6c 69 63 65 28 32 2c 20 31 32 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 60 24 7b 73 74 72 7d 2e 24 7b 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 20 2f 20 31 30 30 30 29 7d 60 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 66 72 69 65 6e 64 6c 79 54 69 6d 65 28 65 6c 61 70 73 65 64 29 20 7b 0a 20 20 20 20 69 66 20 28 65 6c 61 70 73 65 64 20 3c 20 53 45 43 29 20 7b Data Ascii: Time: 30 * DAY, }; // ----- HELPERS ------ function identifier() { const str = (Math.random() + 1).toString(36).slice(2, 12); return `${str}.${Math.floor(Date.now() / 1000)}`; } function friendlyTime(elapsed) { if (elapsed < SEC) {
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 20 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 4d 61 63 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 6d 61 63 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 4c 69 6e 75 78 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 6c 69 6e 75 78 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 75 61 2e 6d 61 74 63 68 28 2f 77 65 62 6f 73 2f 69 29 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 77 65 62 6f 73 27 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 42 72 6f 77 73 65 72 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 75 61 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 Data Ascii: if (ua.match(/Mac/i)) { return 'mac'; } if (ua.match(/Linux/i)) { return 'linux'; } if (ua.match(/webos/i)) { return 'webos'; } return null; } function parseBrowser() { const ua = navigator.userAgent.t
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 20 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 65 76 65 6e 74 20 3d 20 7b 0a 20 20 20 20 20 20 74 3a 20 44 61 74 65 2e 6e 6f 77 28 29 2c 0a 20 20 20 20 20 20 6e 3a 20 74 79 70 65 2c 0a 20 20 20 20 20 20 63 3a 20 63 6f 75 6e 74 2c 0a 20 20 20 20 20 20 2e 2e 2e 28 64 61 74 61 20 3f 20 7b 20 64 3a 20 64 61 74 61 20 7d 20 3a 20 7b 7d 29 2c 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 73 74 61 74 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 65 76 65 6e 74 29 3b 0a 20 20 7d 0a 0a 20 20 2f 2f 20 2d 2d 2d 2d 2d 20 53 54 4f 52 41 47 45 20 2d 2d 2d 2d 2d 2d 0a 20 20 63 6f 6e 73 74 20 73 74 6f 72 61 67 65 20 3d 20 7b 0a 20 20 20 20 62 61 73 65 4b 65 79 3a 20 27 64 74 73 61 27 2c 0a 20 20 20 20 62 75 69 6c 64 4b 65 79 3a 20 66 75 6e 63 74 69 6f 6e 28 6b 65 79 Data Ascii: = null) { const event = { t: Date.now(), n: type, c: count, ...(data ? { d: data } : {}), }; state.events.push(event); } // ----- STORAGE ------ const storage = { baseKey: 'dtsa', buildKey: function(key
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 20 20 20 7d 0a 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 6b 65 79 4f 62 6a 20 3d 20 62 61 73 65 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 6b 65 79 4f 62 6a 2e 65 20 3c 20 44 61 74 65 2e 6e 6f 77 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 64 65 6c 65 74 65 20 62 61 73 65 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 74 42 61 73 65 28 62 61 73 65 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6b 65 79 4f 62 6a 2e 76 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 63 6c 65 61 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 68 69 73 2e 62 61 73 65 4b 65 79 29 3b Data Ascii: } const keyObj = base[key]; if (keyObj.e < Date.now()) { delete base[key]; this.setBase(base); return null; } return keyObj.v; }, clear: function() { localStorage.removeItem(this.baseKey);
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 65 73 73 53 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 20 20 73 74 6f 72 61 67 65 2e 73 65 74 28 27 74 53 65 73 73 4c 27 2c 20 73 74 61 74 65 2e 75 73 65 72 2e 74 53 65 73 73 4c 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 20 20 73 74 6f 72 61 67 65 2e 73 65 74 28 27 70 76 73 27 2c 20 73 74 61 74 65 2e 75 73 65 72 2e 70 76 73 2c 20 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 54 69 6d 65 29 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 53 65 73 73 69 6f 6e 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 74 73 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 20 20 20 20 73 74 61 74 65 2e 75 73 65 72 2e 74 43 75 72 Data Ascii: essS, config.sessionStorageTime); storage.set('tSessL', state.user.tSessL, config.sessionStorageTime); storage.set('pvs', state.user.pvs, config.sessionStorageTime); } function resolveSession() { const ts = Date.now(); state.user.tCur
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 6e 61 20 73 65 73 73 69 6f 6e 20 6d 65 74 72 69 63 73 0a 20 20 20 20 20 20 20 20 20 20 73 74 61 74 65 2e 75 73 65 72 2e 70 76 73 20 3d 20 73 74 6f 72 61 67 65 2e 67 65 74 28 27 70 76 73 27 29 20 7c 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 69 73 4e 65 77 29 20 7b 0a 20 20 20 20 20 20 63 72 65 61 74 65 4e 65 77 53 65 73 73 69 6f 6e 28 74 73 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 73 28 29 20 7b 0a 20 20 20 20 69 66 20 28 73 74 61 74 65 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 30 29 20 7b 0a 20 20 20 20 20 20 64 65 62 75 67 4d 65 73 73 61 67 65 28 27 69 6e 66 6f 27 2c 20 27 6e 6f 20 65 76 65 6e 74 73 20 74 6f Data Ascii: na session metrics state.user.pvs = storage.get('pvs') \|\| 0; } } } if (isNew) { createNewSession(ts); } } function sendEvents() { if (state.events.length === 0) { debugMessage('info', 'no events to
2024-12-17 10:52:13 UTC	1041	IN	Data Raw: 20 74 69 6d 65 20 61 6e 64 20 63 6f 75 6e 74 20 74 6f 20 6e 6f 72 6d 61 6c 69 7a 65 20 61 63 72 6f 73 73 20 68 6f 75 72 73 2c 0a 20 20 20 20 20 20 20 20 20 2a 20 6f 6e 6c 79 20 73 65 6e 64 20 6f 6e 20 74 68 65 20 66 69 72 73 74 20 6c 6f 73 73 20 6f 66 20 76 69 73 69 62 69 6c 69 74 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 68 61 73 45 76 65 6e 74 42 65 65 6e 53 65 6e 74 28 27 70 76 6c 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 45 76 65 6e 74 28 27 70 76 6c 27 2c 20 28 44 61 74 65 2e 6e 6f 77 28 29 20 2d 20 73 74 61 74 65 2e 75 73 65 72 2e 74 50 76 53 29 20 2f 20 31 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 6c 6f 67 45 76 65 6e 74 28 27 70 76 6c 63 27 29 3b 0a 20 Data Ascii: time and count to normalize across hours, * only send on the first loss of visibility on the page */ if (!hasEventBeenSent('pvl')) { logEvent('pvl', (Date.now() - state.user.tPvS) / 1000); logEvent('pvlc');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49958	67.202.105.33	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	1030	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&chpv=10.0.0&chuav=Google%20Chrome%3Bv%3D117.0.5938.132%2C%20Not%3BA%3DBrand%3Bv%3D8.0.0.0%2C%20Chromium%3Bv%3D117.0.5938.132&chp=Windows&chmob=0&chua=Google%20Chrome%3Bv%3D117%2C%20Not%3BA%3DBrand%3Bv%3D8%2C%20Chromium%3Bv%3D117&r=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8&pu=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html HTTP/1.1 Host: de.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=k3eNWWdhV9sHOLzCRlkrhQ==; pids=%5B%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A4%2C%22ts%22%3A1734432731180%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1734432731180%7D%5D
2024-12-17 10:52:13 UTC	1245	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%2204b37b1668%22%2C%22f%22%3A4%2C%22ts%22%3A1734432731180%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1734432733073%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1734432731180%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 1601 date: Tue, 17 Dec 2024 10:52:12 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-12-17 10:52:13 UTC	1601	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 70 69 78 65 6c 3f 70 69 64 3d 67 64 6f 6d 67 35 31 26 74 3d 67 69 66 26 63 61 74 3d 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 25 32 46 43 65 6c 65 62 72 69 74 69 65 73 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 61 6e 64 6f 6d 3d 31 37 33 34 34 33 32 37 33 33 30 37 32 2e 31 22 2c 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 64 62 5f 73 79 6e 63 3f 70 69 64 3d 31 35 39 32 37 26 70 75 75 69 64 3d 6b 33 65 4e 57 57 64 68 56 39 73 48 4f 4c 7a 43 52 6c 6b 72 68 51 25 33 44 25 33 44 26 75 73 5f 70 72 Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=Entertainment%2FCelebrities&us_privacy=&random=1734432733072.1","https://px.ads.linkedin.com/db_sync?pid=15927&puuid=k3eNWWdhV9sHOLzCRlkrhQ%3D%3D&us_pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49957	18.196.145.126	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:12 UTC	559	OUT	GET /pd/dtscout?_t_=px&url=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html&event_source=dtscout&rnd=0.282460356599068&exptid=ZGsAAGdhV9kAAAAIPUfYAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGsAAGdhV9kAAAAIPUfYAw==; __stidv=2
2024-12-17 10:52:13 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 17 Dec 2024 10:52:13 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-12-17 10:52:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49962	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	479	OUT	POST /report/v4?s=kQfwt7Pk%2Ba%2BC12%2FIbRzQYobQeLLiq4VMygEl9jJQ0DpqgAPGfTqALr%2BvJCDAz9HFmoknivAkM2WJF%2F9xanEKgCztgNjr7kdQ8pHNmxinF%2B6acx3FEkrWaIilvg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1810 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	1810	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 36 36 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 33 2e 35 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 75 63 2e 63 6f 2f 77 61 74 Data Ascii: [{"age":59669,"body":{"elapsed_time":335,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.183.59","status_code":403,"type":"http.error"},"type":"network-error","url":"https://alluc.co/wat
2024-12-17 10:52:13 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 17 Dec 2024 10:52:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49970	35.190.80.1	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	473	OUT	POST /report/v4?s=7oUBvHR2ZJ5YDjz9Wqs4%2Fm%2Fdp5feJYYxL0WpOYgSvqwYfDubg%2FTpRVaxHE2bdOijb8kynTLvNCmKGsRw4rACfAywHGQ6HyFsLNZrR6ogJzCmLzNftl3vS2k7qg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 8078 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	8078	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 34 37 36 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 38 36 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 33 2e 35 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 6c 75 63 2e 63 6f 2f 6a 73 Data Ascii: [{"age":14760,"body":{"elapsed_time":2867,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.183.59","status_code":403,"type":"http.error"},"type":"network-error","url":"https://alluc.co/js
2024-12-17 10:52:13 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 17 Dec 2024 10:52:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49964	190.115.19.71	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	592	OUT	GET /styles/global/embed_player.3.css?130 HTTP/1.1 Host: hqq.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hqq.to/e/OEE5S3BhN1M0Ukhwd0xPTVdibVpndz09&ad_level=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	523	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 09 Dec 2020 22:16:37 GMT ETag: W/"5fd14cc5-1701" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Accessing-Static: 1 Cache-Control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30 Pragma: cache server: Google Frontend X-Cache-Status-Inferno-S-static: MISS X-Inferno-Location: static
2024-12-17 10:52:13 UTC	3573	IN	Data Raw: 31 37 30 31 0d 0a 09 09 68 74 6d 6c 2c 20 62 6f 64 79 09 7b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 7d 0a 09 09 62 6f 64 79 7b 0a 09 09 20 20 20 20 66 6f 6e 74 3a 20 31 65 6d 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 09 09 6d 61 72 67 69 6e 20 3a 30 3b 0a 09 09 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 09 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 09 09 68 65 69 67 68 74 3a 31 30 30 25 3b 20 0a 09 09 7d 0a 09 09 09 75 6c 7b 0a 09 09 09 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 09 09 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 09 09 09 7d 0a 09 09 09 2f 2a 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2a 2f 0a 09 09 09 2f Data Ascii: 1701html, body{ height:100%; }body{ font: 1em 'Open Sans', sans-serif;margin :0;padding: 0;overflow:hidden;height:100%; }ul{padding: 0;margin: 0px;}/.grecaptcha-badge{display:none !important;}//
2024-12-17 10:52:13 UTC	2329	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 72 65 6d 3b 0a 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 7d 0a 2e 74 69 6d 65 63 73 73 69 70 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 0a 20 20 20 20 74 65 78 Data Ascii: ne-height: 1.2rem;-ms-flex-direction: row;-webkit-flex-direction: row;flex-direction: row;-ms-flex-align: center;-webkit-align-items: center;align-items: center;bottom: 0px;}.timecssip{ position:fixed; bottom:4px; color:white; tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49972	104.17.247.203	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	543	OUT	GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hqq.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	576	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ" via: 1.1 fly.io fly-request-id: 01JE3KG5NZJ0NVRKT4N0S7NT93-lga CF-Cache-Status: HIT Age: 1292313 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f365cc98de14309-EWR
2024-12-17 10:52:13 UTC	793	IN	Data Raw: 37 33 31 35 0d 0a 2f 2f 20 50 72 6f 67 72 65 73 73 42 61 72 2e 6a 73 20 31 2e 31 2e 30 0a 2f 2f 20 68 74 74 70 73 3a 2f 2f 6b 69 6d 6d 6f 62 72 75 6e 66 65 6c 64 74 2e 67 69 74 68 75 62 2e 69 6f 2f 70 72 6f 67 72 65 73 73 62 61 72 2e 6a 73 0a 2f 2f 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 61 29 3b 65 6c 73 65 7b 76 61 72 20 62 Data Ascii: 7315// ProgressBar.js 1.1.0// https://kimmobrunfeldt.github.io/progressbar.js// License: MIT!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 65 28 64 5b 67 5d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 61 7d 28 29 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 21 66 75 6e 63 74 69 6f 6e 28 62 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 63 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 2e 61 6d 64 3f 61 28 22 73 68 69 66 74 79 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 3f 64 2e 73 68 69 66 74 79 3d 65 28 29 3a 62 2e 73 68 69 66 74 79 3d 65 28 29 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f Data Ascii: uire&&require,g=0;g<d.length;g++)e(d[g]);return e}return a}()({1:[function(b,c,d){!function(b,e){"object"==typeof d&&"object"==typeof c?c.exports=e():"function"==typeof a&&a.amd?a("shifty",[],e):"object"==typeof d?d.shifty=e():b.shifty=e()}(window,functio
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 28 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 29 28 61 29 7d 66 75 6e Data Ascii: neProperty(a,d.key,d)}}function e(a){return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(a){return typeof a}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==Symbol.prototype?"symbol":typeof a})(a)}fun
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 75 72 6e 20 62 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 5f 61 74 74 61 63 68 6d 65 6e 74 2c 64 3d 61 2e 5f 63 75 72 72 65 6e 74 53 74 61 74 65 2c 65 3d 61 2e 5f 64 65 6c 61 79 2c 66 3d 61 2e 5f 65 61 73 69 6e 67 2c 67 3d 61 2e 5f 6f 72 69 67 69 6e 61 6c 53 74 61 74 65 2c 68 3d 61 2e 5f 64 75 72 61 74 69 6f 6e 2c 69 3d 61 2e 5f 73 74 65 70 2c 6a 3d 61 2e 5f 74 61 72 67 65 74 53 74 61 74 65 2c 6b 3d 61 2e 5f 74 69 6d 65 73 74 61 6d 70 2c 6c 3d 6b 2b 65 2b 68 2c 6d 3d 62 3e 6c 3f 6c 3a 62 2c 6e 3d 68 2d 28 6c 2d 6d 29 3b 6d 3e 3d 6c 3f 28 69 28 6a 2c 63 2c 6e 29 2c 61 2e 73 74 6f 70 28 21 30 29 29 3a 28 61 2e 5f 61 70 70 6c 79 46 69 6c 74 65 72 28 22 62 65 66 6f 72 65 54 77 65 65 6e 22 29 2c 6d 3c 6b 2b 65 3f 28 6d 3d 31 Data Ascii: urn b},q=function(a,b){var c=a._attachment,d=a._currentState,e=a._delay,f=a._easing,g=a._originalState,h=a._duration,i=a._step,j=a._targetState,k=a._timestamp,l=k+e+h,m=b>l?l:b,n=h-(l-m);m>=l?(i(j,c,n),a.stop(!0)):(a._applyFilter("beforeTween"),m<k+e?(m=1
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 7d 63 61 74 63 68 28 61 29 7b 63 3d 21 30 2c 64 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 62 7c 7c 6e 75 6c 6c 3d 3d 66 2e 72 65 74 75 72 6e 7c 7c 66 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 64 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 74 77 65 65 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 2c 63 3d 74 68 69 73 2e 5f 61 74 74 61 63 68 6d 65 6e 74 2c 64 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 75 72 65 64 3b 72 65 74 75 72 6e 21 62 26 26 64 7c 7c 74 68 69 73 2e 73 65 74 43 6f 6e 66 69 67 28 62 29 2c 74 68 Data Ascii: }catch(a){c=!0,d=a}finally{try{b\|\|null==f.return\|\|f.return()}finally{if(c)throw d}}}},{key:"tween",value:function(){var b=arguments.length>0&&void 0!==arguments[0]?arguments[0]:void 0,c=this._attachment,d=this._configured;return!b&&d\|\|this.setConfig(b),th
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 69 73 50 6c 61 79 69 6e 67 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 75 73 65 64 41 74 54 69 6d 65 3d 61 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 5f 69 73 50 6c 61 79 69 6e 67 3d 21 31 2c 74 28 74 68 69 73 29 2c 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 72 65 73 75 6d 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 5f 74 69 6d 65 73 74 61 6d 70 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 77 65 65 6e 28 29 3b 69 66 28 74 68 69 73 2e 5f 69 73 50 6c 61 79 69 6e 67 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 3b 76 61 72 20 62 3d 61 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 75 73 65 64 41 74 54 69 6d 65 26 26 28 74 68 69 73 2e Data Ascii: n(){if(this._isPlaying)return this._pausedAtTime=a.now(),this._isPlaying=!1,t(this),this}},{key:"resume",value:function(){if(null===this._timestamp)return this.tween();if(this._isPlaying)return this._promise;var b=a.now();return this._pausedAtTime&&(this.
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 68 69 73 2c 63 28 32 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 62 29 2c 63 2e 64 28 62 2c 22 6c 69 6e 65 61 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 49 6e 51 75 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 49 6e 4f 75 74 51 75 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 49 6e 43 75 62 69 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 2c 63 2e Data Ascii: his,c(2))},function(a,b,c){"use strict";c.r(b),c.d(b,"linear",function(){return d}),c.d(b,"easeInQuad",function(){return e}),c.d(b,"easeOutQuad",function(){return f}),c.d(b,"easeInOutQuad",function(){return g}),c.d(b,"easeInCubic",function(){return h}),c.
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 46 72 6f 6d 54 6f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 46 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 29 2c 63 2e 64 28 62 2c 22 65 61 73 65 54 6f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 70 6f 77 28 61 2c 32 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 28 4d 61 74 68 2e 70 6f 77 28 61 2d 31 2c 32 29 2d 31 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: nction(){return I}),c.d(b,"easeFromTo",function(){return J}),c.d(b,"easeFrom",function(){return K}),c.d(b,"easeTo",function(){return L});var d=function(a){return a},e=function(a){return Math.pow(a,2)},f=function(a){return-(Math.pow(a-1,2)-1)},g=function(a
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 35 36 32 35 2a 28 61 2d 3d 32 2e 32 35 2f 32 2e 37 35 29 2a 61 2b 2e 39 33 37 35 3a 37 2e 35 36 32 35 2a 28 61 2d 3d 32 2e 36 32 35 2f 32 2e 37 35 29 2a 61 2b 2e 39 38 34 33 37 35 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 2e 37 30 31 35 38 3b 72 65 74 75 72 6e 20 61 2a 61 2a 28 28 62 2b 31 29 2a 61 2d 62 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 2e 37 30 31 35 38 3b 72 65 74 75 72 6e 28 61 2d 3d 31 29 2a 61 2a 28 28 62 2b 31 29 2a 61 2b 62 29 2b 31 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 2e 37 30 31 35 38 3b 72 65 74 75 72 6e 28 61 2f 3d 2e 35 29 3c 31 3f 61 2a 61 2a 28 28 31 2b 28 62 2a 3d 31 2e 35 32 35 29 29 2a 61 2d 62 29 2a 2e 35 3a 2e 35 2a 28 28 61 2d 3d 32 29 2a Data Ascii: 5625(a-=2.25/2.75)a+.9375:7.5625(a-=2.625/2.75)a+.984375},A=function(a){var b=1.70158;return aa((b+1)a-b)},B=function(a){var b=1.70158;return(a-=1)a((b+1)a+b)+1},C=function(a){var b=1.70158;return(a/=.5)<1?aa((1+(b=1.525))a-b).5:.5((a-=2)*
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 7b 76 61 72 20 62 3d 61 2e 5f 63 75 72 72 65 6e 74 53 74 61 74 65 2c 63 3d 61 2e 5f 6f 72 69 67 69 6e 61 6c 53 74 61 74 65 2c 64 3d 61 2e 5f 74 61 72 67 65 74 53 74 61 74 65 2c 65 3d 61 2e 5f 65 61 73 69 6e 67 2c 66 3d 61 2e 5f 74 6f 6b 65 6e 44 61 74 61 3b 49 28 65 2c 66 29 2c 5b 62 2c 63 2c 64 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 28 61 2c 66 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 62 3d 61 2e 5f 63 75 72 72 65 6e 74 53 74 61 74 65 2c 63 3d 61 2e 5f 6f 72 69 67 69 6e 61 6c 53 74 61 74 65 2c 64 3d 61 2e 5f 74 61 72 67 65 74 53 74 61 74 65 2c 65 3d 61 2e 5f 65 61 73 69 6e 67 2c 66 3d 61 2e 5f 74 6f 6b 65 6e 44 61 74 61 3b 5b 62 2c 63 2c 64 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: {var b=a._currentState,c=a._originalState,d=a._targetState,e=a._easing,f=a._tokenData;I(e,f),[b,c,d].forEach(function(a){return D(a,f)})}function g(a){var b=a._currentState,c=a._originalState,d=a._targetState,e=a._easing,f=a._tokenData;[b,c,d].forEach(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49973	104.17.247.203	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	530	OUT	GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hqq.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	577	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Fri, 20 May 2016 17:24:42 GMT etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw" via: 1.1 fly.io fly-request-id: 01JDYCKQQQN7E8DX9FR5K8CQ9A-lga CF-Cache-Status: HIT Age: 1467308 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f365cc98de24309-EWR
2024-12-17 10:52:13 UTC	792	IN	Data Raw: 37 30 30 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7000/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: unction(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 62 20 69 6e 20 61 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 62 7c 7c 6b 2e 63 61 6c 6c 28 61 2c 62 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 Data Ascii: if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPrototypeOf"))return!1;for(b in a);return void 0===b\|\|k.call(a,b)},isEmptyObject:function(a){var b;for(b in a)re
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 61 5b 62 5d 2c 62 3d 61 2c 61 3d 63 29 2c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3f 28 64 3d 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 7c 7c 74 68 69 73 2c 64 2e Data Ascii: g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"string"==typeof b&&(c=a[b],b=a,a=c),n.isFunction(a)?(d=e.call(arguments,2),f=function(){return a.apply(b\|\|this,d.
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 2c 52 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 2c 22 2b 4c 2b 22 2a 22 29 2c 53 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4c 2b 22 29 22 2b 4c 2b 22 2a 22 29 2c 54 3d 6e 65 77 20 52 65 67 45 78 70 28 22 3d 22 2b Data Ascii: \']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\$)[\\]]\|"+N+"))\|.)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.))"+L+"+$","g"),R=new RegExp("^"+L+","+L+""),S=new RegExp("^"+L+"([>+~]\|"+L+")"+L+"*"),T=new RegExp("="+
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 3d 62 26 26 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 78 3d 62 3f 62 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 64 3d 64 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 78 26 26 39 21 3d 3d 78 26 26 31 31 21 3d 3d 78 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 78 26 26 28 6f 3d 24 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6f 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 78 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 Data Ascii: {var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d\|\|[],"string"!=typeof a\|\|!a\|\|1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==x&&(o=$.exec(a)))if(f=o[1]){if(9===x){if(!(j=b.getElementById(f)))ret
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b Data Ascii: ===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function la(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function ma(a){
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 29 3a 28 64 65 6c 65 74 65 20 64 2e 66 69 6e 64 2e 49 44 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 Data Ascii: defined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ba,ca);return
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 71 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 Data Ascii: etAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[^$\|!~]?="),a.querySelectorAll(":enabled").length\|\|q.push(":enabled",":disabled"),a.querySelectorAll(",:x"),q.push(",.:")}))
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6b 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6b 61 28 67 5b 64 5d 2c 68 5b 64 5d 29 3a 67 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 68 5b 64 5d 3d 3d 3d 76 3f 31 3a 30 7d 2c 6e 29 3a 6e 7d 2c 66 61 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 61 28 61 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 62 29 7d 2c 66 61 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 Data Ascii: :0;if(e===f)return ka(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ka(g[d],h[d]):g[d]===v?-1:h[d]===v?1:0},n):n},fa.matches=function(a,b){return fa(a,null,null,b)},fa.matchesSelector=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49974	104.17.247.203	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	535	OUT	GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hqq.to/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sun, 27 Apr 2014 20:04:54 GMT etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg" via: 1.1 fly.io fly-request-id: 01JDYCW76E9H6Z6F9JGFF73CSN-lga CF-Cache-Status: HIT Age: 1467031 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8f365cc98f324402-EWR
2024-12-17 10:52:13 UTC	794	IN	Data Raw: 63 33 31 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 43 6f 6f 6b 69 65 20 50 6c 75 67 69 6e 20 76 31 2e 34 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 63 61 72 68 61 72 74 6c 2f 6a 71 75 65 72 79 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 4b 6c 61 75 73 20 48 61 72 74 6c 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 Data Ascii: c31/! jQuery Cookie Plugin v1.4.1 * https://github.com/carhartl/jquery-cookie * * Copyright 2013 Klaus Hartl * Released under the MIT license */(function (factory) {if (typeof define === 'function' && define.amd) {// AMDdefine(['jquery
2024-12-17 10:52:13 UTC	1369	IN	Data Raw: 74 65 64 20 63 6f 6f 6b 69 65 20 61 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 52 46 43 32 30 36 38 2c 20 75 6e 65 73 63 61 70 65 2e 2e 2e 0a 09 09 09 73 20 3d 20 73 2e 73 6c 69 63 65 28 31 2c 20 2d 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 22 2f 67 2c 20 27 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 5c 5c 2f 67 2c 20 27 5c 5c 27 29 3b 0a 09 09 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 52 65 70 6c 61 63 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 72 69 74 74 65 6e 20 70 6c 75 73 65 73 20 77 69 74 68 20 73 70 61 63 65 73 2e 0a 09 09 09 2f 2f 20 49 66 20 77 65 20 63 61 6e 27 74 20 64 65 63 6f 64 65 20 74 68 65 20 63 6f 6f 6b 69 65 2c 20 69 67 6e 6f 72 65 20 69 74 2c 20 69 74 27 73 20 75 6e 75 73 61 62 6c 65 2e 0a 09 09 09 2f 2f 20 49 66 20 77 Data Ascii: ted cookie as according to RFC2068, unescape...s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\');}try {// Replace server-side written pluses with spaces.// If we can't decode the cookie, ignore it, it's unusable.// If w
2024-12-17 10:52:13 UTC	965	IN	Data Raw: 73 74 20 70 6c 61 63 65 20 61 73 73 69 67 6e 20 61 6e 20 65 6d 70 74 79 20 61 72 72 61 79 0a 09 09 2f 2f 20 69 6e 20 63 61 73 65 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 63 6f 6f 6b 69 65 73 20 61 74 20 61 6c 6c 2e 20 41 6c 73 6f 20 70 72 65 76 65 6e 74 73 20 6f 64 64 20 72 65 73 75 6c 74 20 77 68 65 6e 0a 09 09 2f 2f 20 63 61 6c 6c 69 6e 67 20 24 2e 63 6f 6f 6b 69 65 28 29 2e 0a 09 09 76 61 72 20 63 6f 6f 6b 69 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 20 27 29 20 3a 20 5b 5d 3b 0a 0a 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 63 6f 6f 6b 69 65 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 76 61 72 Data Ascii: st place assign an empty array// in case there are no cookies at all. Also prevents odd result when// calling $.cookie().var cookies = document.cookie ? document.cookie.split('; ') : [];for (var i = 0, l = cookies.length; i < l; i++) {var
2024-12-17 10:52:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49961	35.204.89.238	443	6356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 10:52:13 UTC	824	OUT	GET /dpx?cid=11411&us_privacy=&33random=1734432731180.2&ref=https%3A%2F%2Falluc.co%2Fwatch-movies%2Fpassengers.html%3F__cf_chl_tk%3DhEiYbWnnNvUJsTz_XDbBJxHOAojx6uZKanHni_BkrWc-1734432670-1.0.1.1-Jyg4lv82uX9FtspUjx19WmtPAkM7BXu3n08f3oWGFZ8 HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://alluc.co/watch-movies/passengers.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-17 10:52:13 UTC	690	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 17 Dec 2024 10:52:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3100 Connection: close Vary: Accept-Encoding Set-Cookie: suid=C35A28192E3B45F8BB287CD9F1B266EA; Path=/; domain=simpli.fi; Expires=Thu, 18-Dec-25 10:52:13 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=C35A28192E3B45F8BB287CD9F1B266EA; Path=/; domain=simpli.fi; Expires=Thu, 18-Dec-25 10:52:13 GMT; Secure; cache-control: max-age=0, private, must-revalidate x-request-id: GBHxYb3-DPg_vQpmgL4B Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT
2024-12-17 10:52:13 UTC	3100	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 70 61 72 73 65 49 6e 74 28 28 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7c 7c 22 6c 6f 63 61 6c 22 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 30 29 2c 33 36 29 2c 63 3d 22 73 69 66 69 5f 61 74 74 5f 22 2b 62 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 5b 63 5d 2e 72 75 6e 28 29 3b 63 6c 61 73 73 20 53 69 66 69 43 6d 70 43 6f 6d 70 6c 69 61 6e 63 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 74 63 44 61 74 61 3d 61 2c 74 68 69 73 2e 73 69 66 69 56 65 6e 64 6f 72 49 64 3d 22 37 33 22 7d 63 68 65 63 6b 43 6f 6e 73 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 75 74 4f 66 42 61 6e Data Ascii: (function(a){var b=parseInt((location.hostname\|\|"local").substring(0,10),36),c="sifi_att_"+b;if("undefined"!=typeof a[c])return void a[c].run();class SifiCmpCompliance{constructor(a){this.tcData=a,this.sifiVendorId="73"}checkConsent(){return this.outOfBan

Target ID:	0
Start time:	05:51:04
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:51:05
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1856,i,4275831533134915997,9852716672962275646,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:51:05
Start date:	17/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alluc.co/watch-movies/passengers.html"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source. A particular variant of this behavior is to use onion routing networks, such as the publicly available TOR network.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://alluc.co/watch-movies/passengers.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Windows Analysis Report
https://alluc.co/watch-movies/passengers.html