Edit tour

Windows Analysis Report
http://observalgerie.com

Overview

General Information

Sample URL:	http://observalgerie.com
Analysis ID:	1637235
Infos:

Detection

CAPTCHA Scam ClickFix

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected CAPTCHA Scam ClickFix

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,6215800498496673434,798457974497809850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://observalgerie.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.10.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.6.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.5.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.8.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-13T12:24:00.004256+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49836	34.246.67.56	443	TCP

HTTP traffic detected: POST /api/config/prebid HTTP/1.1Host: id5-sync.comConnection: keep-aliveContent-Length: 166sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://observalgerie.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://observalgerie.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_166.1.dr	String found in binary or memory: http://google.com
Source: chromecache_166.1.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_166.1.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_186.1.dr, chromecache_174.1.dr, chromecache_140.1.dr, chromecache_128.1.dr, chromecache_137.1.dr, chromecache_168.1.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_166.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_146.1.dr	String found in binary or memory: http://tizen.org/system/tizenid
Source: chromecache_149.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_149.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_138.1.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_161.1.dr	String found in binary or memory: https://adssettings.google.com"
Source: chromecache_166.1.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_166.1.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_166.1.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_121.1.dr, chromecache_197.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_166.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_121.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_197.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_121.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_197.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_197.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_197.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_166.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_166.1.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_146.1.dr	String found in binary or memory: https://eu.asas.yango.com/mapuid
Source: chromecache_146.1.dr	String found in binary or memory: https://fcpe.beeline.ru/sync/me?guid
Source: chromecache_166.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_166.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_166.1.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_206.1.dr	String found in binary or memory: https://github.com/prebid/Shared-id-v2/
Source: chromecache_166.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_166.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_161.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"
Source: chromecache_161.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png"
Source: chromecache_161.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png"
Source: chromecache_161.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSQwCjtLz
Source: chromecache_161.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/interaction/?ai=CqAfVyRuoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_Dg
Source: chromecache_146.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_146.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_121.1.dr, chromecache_197.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_138.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_121.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_197.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_193.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_138.1.dr, chromecache_193.1.dr, chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_138.1.dr, chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_138.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/dict/$
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_166.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_196.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_121.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_197.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_161.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssA&sig=Cg0ArKJSzLpEAE
Source: chromecache_166.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_166.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_161.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjst&sai=AMfl-YRg&sig=Cg0ArKJSzAVEAE&
Source: chromecache_166.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_146.1.dr	String found in binary or memory: https://spadsync.com/partner?brandid=pyan0002&consent=
Source: chromecache_197.1.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_161.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20250311/r20110914/abg_lite_fy2021.js
Source: chromecache_161.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20250311/r20110914/client/qs_click_protection_fy2021.js
Source: chromecache_161.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20250311/r20110914/client/window_focus_fy2021.js
Source: chromecache_161.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/safeframe/1-0-41/js/ext.js
Source: chromecache_161.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/simgad/40
Source: chromecache_197.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_166.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_197.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_138.1.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_166.1.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_161.1.dr	String found in binary or memory: https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://www.%26gl%
Source: chromecache_121.1.dr, chromecache_197.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_166.1.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_161.1.dr	String found in binary or memory: https://www.google.com/url?ct=abg
Source: chromecache_166.1.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_161.1.dr	String found in binary or memory: https://www.gstatic.com"
Source: chromecache_161.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png"
Source: chromecache_166.1.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_146.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_146.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_146.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6904_1036923

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6904_1036923

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@27/156@136/43

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,6215800498496673434,798457974497809850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://observalgerie.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,6215800498496673434,798457974497809850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://observalgerie.com	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
securepubads.g.doubleclick.net	142.250.185.98	true	false	high
mc.yandex.ru	77.88.21.119	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
ag.dns-finder.com	0.0.0.0	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.35	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.185.67	true	false	high
id5-sync.com	162.19.138.83	true	false	high
observalgerie.com	104.21.86.72	true	false	high
use.fontawesome.com.cdn.cloudflare.net	172.67.142.245	true	false	high
rtb.gumgum.com	52.19.120.53	true	false	high
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	high
e4536.g.akamaiedge.net	23.57.19.78	true	false	high
www.google.com	142.250.185.132	true	false	high
lb.eu-1-id5-sync.com	162.19.138.83	true	false	high
cdn.id5-sync.com	172.67.38.106	true	false	high
e9957.e4.akamaiedge.net	2.19.105.198	true	false	high
match.adsrvr.org	15.197.193.217	true	false	high
match.prod.bidr.io	52.214.242.83	true	false	high
google.com	142.250.186.78	true	false	high
sync.ipredictive.com	52.55.124.48	true	false	high
ep1.adtrafficquality.google	142.250.184.226	true	false	high
ad.doubleclick.net	216.58.212.166	true	false	high
ep2.adtrafficquality.google	142.250.186.161	true	false	high
beacons.gvt2.com	142.251.143.35	true	false	high
euw-ice.360yield.com	34.246.67.56	true	false	high
e2c10.gcp.gvt2.com	34.116.74.210	true	false	high
d1ykf07e75w7ss.cloudfront.net	108.138.3.93	true	false	high
ad-delivery.net	172.67.69.19	true	false	high
googleads.g.doubleclick.net	216.58.206.66	true	false	high
www3.l.google.com	216.58.206.78	true	false	high
a37dd8b3f3000a75e.awsglobalaccelerator.com	15.197.152.159	true	false	unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	high
dexeqbeb7giwr.cloudfront.net	13.32.121.112	true	false	high
btloader.com	172.67.41.60	true	false	high
config.aps.amazon-adsystem.com	99.86.4.128	true	false	high
ib.anycast.adnxs.com	185.89.210.46	true	false	high
logs2.sportslocalmedia.com	37.59.22.41	true	false	high
data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
sync.go.sonobi.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
gum.criteo.com	unknown	unknown	false	high
at.teads.tv	unknown	unknown	false	high
_8545._https.data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	unknown
ice.360yield.com	unknown	unknown	false	high
dis.eu.criteo.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
secure.cdn.fastclick.net	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
js.stripe.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	high
https://match.prod.bidr.io/cookie-sync/id5?us_privacy=	false	high
https://mc.yandex.com/sync_cookie_image_check_secondary?scid=6b6c33f3-e82d-961f-0f9f-e803a87bfaac&cid=99162160	false	high
https://c.amazon-adsystem.com/aax2/apstag.js	false	high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fid5-sync.com%2Fc%2F1%2F2%2F3%2F6.gif%3Fpuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false	high
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1349989824626110&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1741864518&plaf=1%3A2%2C2%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C8%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fobservalgerie.com%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiapm=0.15&aiapmi=0.33938&ailct=0.6&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1741864972645&bpp=4&bdt=5082&idt=13253&shv=r20250305&mjsv=m202503120101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5332867959619&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=897&scr_x=0&scr_y=0&eid=95351336%2C42532524%2C95354310%2C95354336%2C95354597%2C31090986%2C95352177&oid=2&pvsid=1449127172277489&tmod=2024399249&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.~CAA.~CAA.&ifi=1&uci=a!1&fsb=1&dtd=13273	false	high
https://observalgerie.com/	false	high
https://match.prod.bidr.io/cookie-sync/id5?us_privacy=&_bee_ppp=1	false	high
https://mc.yandex.com/watch/99162160?wmode=7&page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A0%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072257%3Aet%3A1741864978%3Ac%3A1%3Arn%3A688583309%3Arqn%3A1%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A8544%3Awv%3A2%3Ads%3A0%2C3515%2C656%2C199%2C3035%2C0%2C%2C893%2C3%2C%2C%2C%2C12535%3Aco%3A0%3Acpf%3A1%3Ans%3A1741864960117%3Arqnl%3A1%3Ast%3A1741864979%3At%3AObservAlg%C3%A9rie%20%3A%20Infos%20et%20news%20pour%20la%20diaspora%20alg%C3%A9rienne&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)ti(1)	false	high
https://secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js	false	high
https://mc.yandex.ru/metrika/tag.js	false	high
https://mc.yandex.ru/sync_cookie_image_start_secondary?cid=99162160&redirect_domain=mc.yandex.com&scid=6b6c33f3-e82d-961f-0f9f-e803a87bfaac&token=10611.dk4dsoSP0uqcN3BQIibzoFocq-4F7ysV7wrSi6kduu6s5X6yMkQrw8kyF5rnchxc.P80NFzyN6T3zLSyp2eJwd86uw7w%2C	false	high
https://mc.yandex.com/watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A0%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072257%3Aet%3A1741864978%3Ac%3A1%3Arn%3A688583309%3Arqn%3A1%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A8544%3Awv%3A2%3Ads%3A0%2C3515%2C656%2C199%2C3035%2C0%2C%2C893%2C3%2C%2C%2C%2C12535%3Aco%3A0%3Acpf%3A1%3Ans%3A1741864960117%3Arqnl%3A1%3Ast%3A1741864979%3At%3AObservAlg%C3%A9rie%20%3A%20Infos%20et%20news%20pour%20la%20diaspora%20alg%C3%A9rienne&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29ti%281%29&redirnss=1	false	high
https://securepubads.g.doubleclick.net/pagead/managed/dict/m202503110101/gpt	false	high
https://mc.yandex.com/watch/99162160?page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&hittoken=1741864985_f9500050dc7ec8553c95cd80f0d894f7c7105e5e124816a58fab058d8d7857ba&browser-info=nb%3A1%3Acl%3A8674%3Aar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A1%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072312%3Aet%3A1741864993%3Ac%3A1%3Arn%3A270085786%3Arqn%3A2%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1741864960117%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1741864993&t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(42009088)dss(2)ti(0)&force-urlencoded=1	false	high
https://id5-sync.com/api/config/prebid	false	high
https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html	false	high
https://lb.eu-1-id5-sync.com/lb/v1	false	high
https://id5-sync.com/k/264.gif?puid=44299306-88df-4aa5-8b9a-e073f9cfb8b6&ttl=%%TTL%%	false	high
https://id5-sync.com/i/1/8.gif?o=api&id5id=ID5*MjPK25uHUCWoZU4iRxDXqAKXoVnlSsoMT2fOm-1_qWgCrcWL4-bND5Q_Jr5Gd07O&gdpr_consent=undefined&gdpr=false	false	high
https://google.com/domainreliability/upload	false	high
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false	high
https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js	false	high
https://googleads.g.doubleclick.net/pagead/html/r20250305/r20190131/zrt_lookup_fy2021.html	false	high
https://mc.yandex.com/sync_cookie_image_decide?cid=99162160&scid=08dcedb4-fb35-9606-6002-73bab6f393f8&token=10611.okbh_UQDjtHRtcIK2sM5QlhAbevKJfsZ8EudHij0YH4mvTkp0ZYKid7nFa5MKGOjV-cM5spGRZ4Lzn5fkn2VmkDmD_zSELyWXaB5ZH0DwdZlQ86tZhWQRlyI96jojMMbyaPDmp6rI6zqC_WSfDGabe1TJA_dRdZY2o0QgqpPhvnz6lVJCelvhqlSmrnNW_RsBz3dkcWm4JlvjcpcBMbCnKmAZCNZnDwcW-_7ZVczDqY%2C.RExUstJmEcDoTp61P9sjadpyGtc%2C	false	high
https://ice.360yield.com/ul_cb/match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-2500m4GqzqhjtMlHFi1DApFbsuVMMOdPYTRw7XlTgw&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F1%2F124%2F2%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	high
https://rtb.gumgum.com/getuid/id5?r=https%3A%2F%2Fid5-sync.com%2Fc%2F1%2F441%2F6%2F3.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	high
https://sync.go.sonobi.com/us?loc=https%3A%2F%2Fid5-sync.com%2Fc%2F1%2F434%2F7%2F2.gif%3Fpuid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&consent=	false	high
https://securepubads.g.doubleclick.net/tag/js/gpt.js	false	high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent=	false	high
https://ep2.adtrafficquality.google/sodar/sodar2.js	false	high
https://id5-sync.com/c/1/2/3/6.gif?puid=721870647703048605&gdpr=0&gdpr_consent=	false	high
https://id5-sync.com/cq/1/124/2/7.gif?puid=0b2645ae-e037-4187-89ab-e678f3cf607a&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=	false	high
https://id5-sync.com/k/155.gif?puid=AACDsk7PpYEAABtPVjtpsQ&id5AccountNum=155&numCascadesAllowed=9	false	high
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	false	high
https://id5-sync.com/gm/v3	false	high
https://www.google.com/recaptcha/api2/aframe	false	high
https://mc.yandex.com/sync_cookie_image_check?scid=08dcedb4-fb35-9606-6002-73bab6f393f8&cid=99162160	false	high
https://id5-sync.com/c/1/796/5/4.gif?puid=cbdc479e-c2b4-445a-85c2-e25c11c959c9&gdpr=0&gdpr_consent=	false	high
https://ice.360yield.com/match?publisher_dsp_id=313&dsp_callback=1&external_user_id=ID5-2500m4GqzqhjtMlHFi1DApFbsuVMMOdPYTRw7XlTgw&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F1%2F124%2F2%2F7.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	high
https://sync.ipredictive.com/d/sync/cookie/generic?partner=id5&cspid=18&cb=&redirect=https%3A%2F%2Fid5-sync.com%2Fc%2F1%2F796%2F5%2F4.gif%3Fpuid%3D%24%7BADELPHIC_CUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	high
https://mc.yandex.ru/sync_cookie_image_start?cid=99162160&redirect_domain=mc.yandex.com&scid=08dcedb4-fb35-9606-6002-73bab6f393f8&token=10611.8Tqek0UB2z1gnzQl5IPGq9C6I5JCCZUaO7MnIqzV4mdflJqHfjq5MUvXGYtE_Ikw.uEhXv3HGPco8YJnrJfMWDXxdWeQ%2C	false	high
https://www.google.com/recaptcha/about/images/reCAPTCHA-logo@2x.png	false	high
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202503060101/pubads_impl.js	false	high
https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fobservalgerie.com&pubid=8a83e099-851b-4737-9ca3-c7092ea4fc9f	false	high
https://logs2.sportslocalmedia.com/events	false	high
https://id5-sync.com/bounce	false	high
https://cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20250313	false	high
https://at.teads.tv/fpc?analytics_tag_id=PUB_17023&tfpvi=&gdpr_consent=&gdpr_status=22&gdpr_reason=220&ccpa_consent=&sv=prebid-v1	false	high
https://id5-sync.com/c/1/434/7/2.gif?puid=d6441a0e-bbbb-426e-9516-2a92602c951f&gdpr=0&gdpr_consent=	false	high
https://id5-sync.com/c/1/203/4/5.gif?puid=ad07551d-a6dc-4725-b122-9be0ef07be77&gdpr=0&gdpr_consent=	false	high
https://match.adsrvr.org/track/cmb/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent=	false	high
https://id5-sync.com/c/1/441/6/3.gif?puid=e_388bbacf-9b14-480d-8690-f6ff774bab6d&gdpr=0&gdpr_consent=	false	high
https://ib.adnxs.com/getuid?https://id5-sync.com/c/1/2/3/6.gif?puid=$UID&gdpr=0&gdpr_consent=	false	high
https://id5-sync.com/g/v2/1.json	false	high
https://mc.yandex.com/metrika/advert.gif	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.broofa.com	chromecache_149.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CqAfVyRuoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_Dg	chromecache_161.1.dr	false	high
https://ep2.adtrafficquality.google	chromecache_197.1.dr	false	high
https://mc.yandex.	chromecache_146.1.dr	false	high
https://www.google.com	chromecache_197.1.dr	false	high
https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttps://www.%26gl%	chromecache_161.1.dr	false	high
https://fundingchoicesmessages.google.com/i/$	chromecache_166.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSQwCjtLz	chromecache_161.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png"	chromecache_161.1.dr	false	high
http://ns.attribution.com/ads/1.0/	chromecache_186.1.dr, chromecache_174.1.dr, chromecache_140.1.dr, chromecache_128.1.dr, chromecache_137.1.dr, chromecache_168.1.dr	false	high
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_166.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/html/$	chromecache_166.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"	chromecache_161.1.dr	false	high
https://mc.yandex.md/cc	chromecache_146.1.dr	false	high
https://www.google.com/adsense	chromecache_138.1.dr	false	high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_121.1.dr	false	high
https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232	chromecache_197.1.dr	false	high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_197.1.dr	false	high
https://github.com/prebid/Shared-id-v2/	chromecache_206.1.dr	false	high
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjst&sai=AMfl-YRg&sig=Cg0ArKJSzAVEAE&	chromecache_161.1.dr	false	high
https://www.google.com/url?ct=abg	chromecache_161.1.dr	false	high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_166.1.dr	false	high
https://securepubads.g.doubleclick.net/pagead/js/car.js	chromecache_166.1.dr	false	high
http://mathiasbynens.be/	chromecache_166.1.dr	false	high
https://eu.asas.yango.com/mapuid	chromecache_146.1.dr	false	high
https://www.google.com/adsense/search/async-ads.js	chromecache_166.1.dr	false	high
http://googleads.g.doubleclick.net	chromecache_166.1.dr	false	high
https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231	chromecache_121.1.dr	false	high
https://yastatic.net/s3/taxi-front/yango-gdpr-popup/	chromecache_146.1.dr	false	high
https://ep2.adtrafficquality.google/sodar/$	chromecache_166.1.dr	false	high
http://google.com	chromecache_166.1.dr	false	high
https://www.google.com/s2/favicons?sz=64&domain_url=	chromecache_166.1.dr	false	high
https://ep1.adtrafficquality.google/bg/	chromecache_121.1.dr, chromecache_197.1.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_149.1.dr	false	high
https://ep2.adtrafficquality.google/sodar/	chromecache_197.1.dr	false	high
https://cse.google.com/cse.js	chromecache_166.1.dr	false	high
http://tizen.org/system/tizenid	chromecache_146.1.dr	false	high
https://googleads.g.doubleclick.net	chromecache_166.1.dr	false	high
https://cdn.ampproject.org/rtv/$	chromecache_166.1.dr	false	high
https://ep3.adtrafficquality.google/ivt/worklet/caw.js	chromecache_166.1.dr	false	high
https://yastatic.net/s3/gdpr/v3/gdpr	chromecache_146.1.dr	false	high
https://ymetrica1.com/watch/3/1	chromecache_146.1.dr	false	high
https://ep1.adtrafficquality.google/getconfig/sodar	chromecache_166.1.dr	false	high
https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png"	chromecache_161.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.19.120.53	rtb.gumgum.com	United States	16509	AMAZON-02US	false
2.19.105.198	e9957.e4.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
23.58.105.202	unknown	United States	18101	RELIANCE-COMMUNICATIONS-INRelianceCommunicationsLtdDAKC	false
162.19.138.83	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
87.250.251.119	unknown	Russian Federation	13238	YANDEXRU	false
52.214.242.83	match.prod.bidr.io	United States	16509	AMAZON-02US	false
13.32.121.112	dexeqbeb7giwr.cloudfront.net	United States	16509	AMAZON-02US	false
34.246.67.56	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
172.67.216.143	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.78	google.com	United States	15169	GOOGLEUS	false
104.26.2.70	unknown	United States	13335	CLOUDFLARENETUS	false
15.197.152.159	a37dd8b3f3000a75e.awsglobalaccelerator.com	United States	7430	TANDEMUS	false
37.59.22.41	logs2.sportslocalmedia.com	France	16276	OVHFR	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
77.88.21.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
172.67.142.245	use.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
216.58.212.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
108.138.3.93	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
142.250.185.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
99.86.4.128	config.aps.amazon-adsystem.com	United States	16509	AMAZON-02US	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
23.57.19.78	e4536.g.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
172.217.18.97	unknown	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
185.89.210.46	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
52.55.124.48	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
172.67.38.106	cdn.id5-sync.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.161	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
104.21.86.72	observalgerie.com	United States	13335	CLOUDFLARENETUS	false
172.67.69.19	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
216.58.206.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.41.60	btloader.com	United States	13335	CLOUDFLARENETUS	false
141.95.33.120	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
69.166.1.35	iad-2-sync.go.sonobi.com	United States	27630	AS-XFERNETUS	false
162.19.138.117	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
142.250.185.98	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637235
Start date and time:	2025-03-13 12:22:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://observalgerie.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@27/156@136/43
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.238, 142.250.186.46, 142.250.184.227, 64.233.167.84, 142.250.184.206, 142.250.186.110, 142.250.186.66, 142.250.186.138, 142.250.186.106, 142.250.184.234, 142.250.185.170, 142.250.186.42, 142.250.184.202, 142.250.185.74, 142.250.185.202, 142.250.186.170, 142.250.185.138, 172.217.18.106, 172.217.16.202, 216.58.206.42, 142.250.74.202, 142.250.185.106, 172.217.18.10, 142.250.185.174, 216.58.206.46, 142.250.177.3, 142.250.184.226, 142.250.186.131, 142.250.185.99, 142.250.184.238, 142.250.185.78, 142.250.186.174, 216.58.206.78, 172.202.163.200, 23.60.203.209, 20.190.160.20, 2.19.96.113
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, translate.googleapis.com, csi.gstatic.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://observalgerie.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.10.pages.csv, type: HTML
Source: Yara match	File source: 0.6.pages.csv, type: HTML
Source: Yara match	File source: 0.5.pages.csv, type: HTML
Source: Yara match	File source: 0.8.pages.csv, type: HTML

Source: 0.25.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This JavaScript snippet exhibits several high-risk behaviors that indicate potential malicious intent. It contains dynamic code execution, data exfiltration, and obfuscated code/URLs, which are all considered high-risk indicators. Additionally, the script interacts with an untrusted domain, which further increases the risk. While the script may have some legitimate functionality, the overall behavior and lack of transparency suggest a high-risk scenario that requires further investigation.
Source: 0.93.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk indicators, including dynamic code execution through the use of `eval` and the `Function` constructor. It also exhibits obfuscated code, which is a common technique used in malicious scripts. The combination of these behaviors strongly suggests this script is highly suspicious and potentially malicious.
Source: 0.114.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of `eval` and the construction of dynamic variable assignments suggest the potential for malicious activities. Additionally, the obfuscated nature of the code makes it difficult to analyze and understand its true purpose. Overall, this script poses a significant security risk and should be treated with caution.

Source: https://observalgerie.com/	HTTP Parser: No favicon
Source: https://observalgerie.com/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.49
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.49
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: observalgerie.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: _8545._https.data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: at.teads.tv
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: lb.eu-1-id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: logs2.sportslocalmedia.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: ag.dns-finder.com
Source: global traffic	DNS traffic detected: DNS query: config.aps.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: secure.cdn.fastclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: dis.eu.criteo.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: e2c10.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 12:22:40.468415022 CET	53	62416	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:40.468429089 CET	53	53138	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:41.002356052 CET	54666	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:41.003077984 CET	59556	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:41.011681080 CET	53	54666	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:41.012094975 CET	53	59556	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:41.013050079 CET	55929	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:41.015079021 CET	58802	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:41.022768021 CET	53	55929	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:41.026272058 CET	53	58802	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:43.896590948 CET	53	52436	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:44.244541883 CET	53	49635	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:45.090610027 CET	59474	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:45.090754032 CET	55882	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:45.097099066 CET	53	59474	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:45.097260952 CET	53	55882	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:48.517515898 CET	49743	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:48.517663002 CET	54772	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:48.524251938 CET	53	49743	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:48.526061058 CET	53	54772	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:49.098401070 CET	49767	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:49.098534107 CET	54938	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:49.309659958 CET	53	49767	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:49.314951897 CET	53	54938	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:49.496649981 CET	63461	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:49.497313976 CET	60625	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:49.526001930 CET	53	60625	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:49.526062965 CET	53	63461	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.395442009 CET	58784	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.395852089 CET	62258	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.398159027 CET	58890	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.398159027 CET	56675	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.402473927 CET	53	58784	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.402487040 CET	53	62258	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.421875954 CET	58702	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.422240973 CET	62946	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.426876068 CET	53	58890	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.427450895 CET	53	56675	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.429030895 CET	53	58702	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.430299997 CET	53	62946	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.660803080 CET	52544	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.660959959 CET	59710	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.667711020 CET	53	52544	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.667737961 CET	53	59710	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.706749916 CET	59732	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.706803083 CET	53495	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.707313061 CET	63877	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.707443953 CET	58667	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.708358049 CET	56162	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.708511114 CET	56022	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.709211111 CET	57813	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.709362984 CET	50760	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:50.713422060 CET	53	53495	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.713937044 CET	53	58667	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.714987993 CET	53	63877	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.715153933 CET	53	56162	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.715554953 CET	53	56022	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.715931892 CET	53	57813	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.716445923 CET	53	50760	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:50.755122900 CET	53	59732	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.086579084 CET	65206	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.086728096 CET	62359	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.093439102 CET	53	65206	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.093451977 CET	53	62359	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.488296032 CET	61360	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.488454103 CET	51195	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.488982916 CET	60132	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.489181042 CET	60648	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.494971037 CET	53	51195	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.495074034 CET	53	61360	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.495637894 CET	53	60132	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.495898008 CET	53	60648	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.501220942 CET	58397	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.501351118 CET	56934	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.507759094 CET	53	56934	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.508356094 CET	53	58397	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.510919094 CET	53604	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.511151075 CET	53306	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.517910004 CET	53	53604	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.517921925 CET	53	53306	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.521399021 CET	53	54319	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.523143053 CET	53	59702	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.553826094 CET	57427	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.553963900 CET	59015	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.560264111 CET	53	57427	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.560538054 CET	53	59015	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.579121113 CET	58282	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.579291105 CET	65074	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:53.585864067 CET	53	65074	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:53.587126970 CET	53	58282	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:54.524203062 CET	52607	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:54.524338961 CET	60433	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:54.531095982 CET	53	52607	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:54.531107903 CET	53	60433	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.577362061 CET	63121	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.577507019 CET	58921	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.577759981 CET	63256	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.577905893 CET	57768	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.584122896 CET	53	63121	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.584398031 CET	53	58921	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.584403992 CET	53	63256	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.584408045 CET	53	57768	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.904203892 CET	63142	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.904350042 CET	62984	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:55.911551952 CET	53	62984	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:55.913232088 CET	53	63142	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:56.388017893 CET	57779	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:56.388161898 CET	65041	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:56.394766092 CET	53	57779	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:56.394798040 CET	53	65041	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:58.525959969 CET	59232	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:58.526186943 CET	63642	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:58.532679081 CET	53	59232	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:58.533191919 CET	53	63642	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:59.900036097 CET	55933	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:59.900186062 CET	50280	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:59.907217979 CET	53	50280	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:59.907233000 CET	53	55933	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:59.984272003 CET	50258	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:59.984532118 CET	59812	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:22:59.991710901 CET	53	50258	1.1.1.1	192.168.2.16
Mar 13, 2025 12:22:59.991725922 CET	53	59812	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:01.193135977 CET	53	53413	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:01.426433086 CET	51027	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:01.426569939 CET	57513	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:01.434716940 CET	53	51027	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:01.435516119 CET	53	57513	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:02.078756094 CET	58003	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:02.078922987 CET	60000	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:02.085665941 CET	53	60000	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:02.085753918 CET	53	58003	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:03.172384024 CET	52811	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:03.172521114 CET	49972	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:03.179744005 CET	53	49972	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:03.180212975 CET	53	52811	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.571110964 CET	61132	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.571249962 CET	53716	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.571723938 CET	53729	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.571846008 CET	64259	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.578228951 CET	53	61132	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.578435898 CET	53	53729	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.578445911 CET	53	64259	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.579528093 CET	53	53716	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.581928015 CET	52869	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.582066059 CET	51541	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.588910103 CET	53	52869	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.589713097 CET	53	51541	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.785729885 CET	54096	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.785892010 CET	60127	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:05.792669058 CET	53	60127	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:05.793359995 CET	53	54096	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:06.742638111 CET	52602	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:06.742819071 CET	52987	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:06.750612974 CET	53	52602	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:06.751068115 CET	53	52987	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:06.768188953 CET	61299	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:06.768345118 CET	60370	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:06.775037050 CET	53	61299	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:06.775237083 CET	53	60370	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:09.548619032 CET	56709	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:09.548773050 CET	60430	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:09.555425882 CET	53	60430	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:09.556281090 CET	53	56709	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:10.534981966 CET	49546	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:10.535118103 CET	50522	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:10.541697979 CET	53	50522	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:10.542104959 CET	53	49546	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:11.776390076 CET	52935	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:11.776441097 CET	56092	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:11.782910109 CET	53	52935	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:11.783138037 CET	53	56092	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:17.423876047 CET	51461	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:17.424031973 CET	51324	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:17.430777073 CET	53	51461	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:17.430833101 CET	53	51324	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:20.036117077 CET	53	61447	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:20.379821062 CET	63203	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:20.379986048 CET	49859	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:20.380815983 CET	57524	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:20.380970001 CET	52426	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:20.387321949 CET	53	52426	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:20.387384892 CET	53	63203	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:20.387554884 CET	53	49859	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:20.387569904 CET	53	57524	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.203974009 CET	59324	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.204117060 CET	60026	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.211379051 CET	53	60026	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.211437941 CET	53	59324	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.237457037 CET	57103	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.238303900 CET	50917	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.241241932 CET	52752	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.241533041 CET	55820	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:23.244097948 CET	53	57103	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.246052980 CET	53	50917	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.247925043 CET	53	52752	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:23.248428106 CET	53	55820	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:24.979978085 CET	53	54260	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:28.582631111 CET	62552	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:28.582765102 CET	57717	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:28.589634895 CET	53	57717	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:28.589688063 CET	53	62552	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:34.573333979 CET	59704	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:34.573478937 CET	58657	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:34.580152035 CET	53	59704	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:34.580506086 CET	53	58657	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:40.260282040 CET	53	56590	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:40.343132973 CET	64626	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:40.343274117 CET	64686	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:40.350243092 CET	53	64626	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:40.351140022 CET	53	64686	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:40.781214952 CET	53	53454	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:46.075166941 CET	53	61685	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:48.147803068 CET	54605	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:48.147916079 CET	61634	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:48.154772997 CET	53	61634	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:48.156941891 CET	53	54605	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:57.326447964 CET	52362	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:57.326594114 CET	55632	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:23:57.332958937 CET	53	52362	1.1.1.1	192.168.2.16
Mar 13, 2025 12:23:57.334449053 CET	53	55632	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:02.740853071 CET	138	138	192.168.2.16	192.168.2.255
Mar 13, 2025 12:24:05.707350016 CET	64570	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:05.707469940 CET	63363	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:05.714114904 CET	53	64570	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:05.714304924 CET	53	63363	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:07.030874968 CET	62003	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:07.031152964 CET	63119	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:07.037929058 CET	53	62003	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:07.037955046 CET	53	63119	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:09.479109049 CET	53	50293	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:14.314635992 CET	60292	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:14.314802885 CET	52726	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:14.321357012 CET	53	60292	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:14.321438074 CET	53	52726	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:14.489201069 CET	61814	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:14.489254951 CET	57242	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:14.495788097 CET	53	61814	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:14.496140003 CET	53	57242	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:17.252666950 CET	51360	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:17.252785921 CET	53972	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:17.260116100 CET	53	51360	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:17.260174990 CET	53	53972	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:17.477186918 CET	64784	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:17.485358953 CET	53	64784	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:17.925473928 CET	50915	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:17.932884932 CET	53	50915	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:18.933054924 CET	50915	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:18.939512014 CET	53	50915	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:19.939965963 CET	50915	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:19.947180033 CET	53	50915	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:21.953032970 CET	50915	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:21.959577084 CET	53	50915	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:23.364398003 CET	51623	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:23.364547014 CET	60520	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:23.370945930 CET	53	60520	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:23.371043921 CET	53	51623	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:25.966089964 CET	50915	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:25.972908974 CET	53	50915	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:30.491585016 CET	61579	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:30.492237091 CET	63474	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:30.498245001 CET	53	61579	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:30.498826981 CET	53	63474	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:30.710329056 CET	53766	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:30.710541010 CET	56590	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:30.717080116 CET	53	53766	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:30.717276096 CET	53	56590	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:31.155708075 CET	51819	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:31.162655115 CET	53	51819	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:32.163150072 CET	51819	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:32.170105934 CET	53	51819	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:33.170094967 CET	51819	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:33.176845074 CET	53	51819	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:35.184176922 CET	51819	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:35.190970898 CET	53	51819	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:39.198024988 CET	51819	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:39.204968929 CET	53	51819	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:44.484237909 CET	55299	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:44.484350920 CET	55258	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:44.492111921 CET	53	55258	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:44.492125988 CET	53	55299	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:44.705136061 CET	64801	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:44.711945057 CET	53	64801	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:45.152451038 CET	53938	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:45.159503937 CET	53	53938	1.1.1.1	192.168.2.16
Mar 13, 2025 12:24:46.157001019 CET	53938	53	192.168.2.16	1.1.1.1
Mar 13, 2025 12:24:46.163748026 CET	53	53938	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:52 UTC	629	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive Origin: https://observalgerie.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:52 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 11:22:52 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 91fb27ef08e674c0-MIA
2025-03-13 11:22:52 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-03-13 11:22:52 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:52 UTC	632	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20250313 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: text/plain sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:53 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1590 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2358 X-JSD-Version-Type: version ETag: W/"636-8PLcxSN2QWQSCsPoJBamOlRqxKE" Accept-Ranges: bytes Age: 26517 Date: Thu, 13 Mar 2025 11:22:52 GMT X-Served-By: cache-fra-eddf8230103-FRA, cache-mia-kmia1760025-MIA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 35 2d 30 33 2d 31 32 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 35 2d 30 33 2d 31 32 54 31 36 3a 30 30 3a 33 35 2e 32 39 34 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 39 2e 30 32 36 32 37 32 32 37 36 33 31 38 32 2c 22 42 47 4e 22 3a 31 2e 37 39 36 36 31 39 35 31 31 32 39 38 39 31 36 2c 22 43 5a 4b 22 3a 32 32 2e 39 37 37 32 31 38 34 34 35 37 31 30 30 38 36 2c 22 44 4b 4b 22 3a 36 2e 38 35 32 30 31 31 37 35 38 32 32 31 35 36 39 2c 22 47 42 50 22 3a 30 2e 37 37 32 33 34 39 38 30 37 30 39 31 36 37 37 33 2c 22 48 55 46 22 3a 33 36 37 2e 32 34 32 33 32 39 35 39 37 36 34 38 33 Data Ascii: {"dataAsOf":"2025-03-12T00:00:00.000Z","generatedAt":"2025-03-12T16:00:35.294Z","conversions":{"USD":{"USD":1,"JPY":149.0262722763182,"BGN":1.796619511298916,"CZK":22.977218445710086,"DKK":6.852011758221569,"GBP":0.7723498070916773,"HUF":367.2423295976483
2025-03-13 11:22:53 UTC	212	IN	Data Raw: 30 34 39 34 33 30 32 39 30 39 34 2c 22 4d 58 4e 22 3a 32 36 2e 32 30 39 34 37 32 31 35 36 38 30 36 37 37 35 2c 22 4d 59 52 22 3a 35 2e 37 33 36 33 34 30 30 36 35 31 37 37 35 37 34 2c 22 4e 5a 44 22 3a 32 2e 32 36 36 34 36 36 38 35 32 32 30 38 36 36 33 35 2c 22 50 48 50 22 3a 37 34 2e 32 37 35 30 37 37 39 30 33 38 35 31 31 38 2c 22 53 47 44 22 3a 31 2e 37 32 37 38 30 30 33 37 35 38 34 31 34 38 30 36 2c 22 54 48 42 22 3a 34 33 2e 38 33 34 32 39 36 37 32 34 34 37 30 31 33 36 2c 22 5a 41 52 22 3a 32 33 2e 38 31 36 39 33 31 38 39 36 35 37 32 32 33 32 2c 22 45 55 52 22 3a 31 2e 31 38 39 33 37 31 37 37 33 38 32 39 30 36 33 35 7d 7d 7d Data Ascii: 04943029094,"MXN":26.209472156806775,"MYR":5.736340065177574,"NZD":2.2664668522086635,"PHP":74.27507790385118,"SGD":1.7278003758414806,"THB":43.834296724470136,"ZAR":23.816931896572232,"EUR":1.1893717738290635}}}

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:52 UTC	685	OUT	GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CLbgygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:53 UTC	778	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="recaptcha" Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Length: 18160 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 13 Mar 2025 10:52:04 GMT Expires: Thu, 13 Mar 2025 11:42:04 GMT Cache-Control: public, max-age=3000 Age: 1849 Last-Modified: Wed, 29 Jul 2020 17:15:00 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 11:22:53 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 98 00 00 01 d0 08 06 00 00 00 9c 30 7c 54 00 00 46 b7 49 44 41 54 78 da ec 9d 5b 6c 5c 47 19 c7 47 71 5b 01 6a cb 03 2d a8 d9 99 b3 be a4 b5 89 51 aa 62 89 e4 cc cc 3a de 3d 9b 4b 9b 36 40 23 4b 50 de 00 55 08 21 28 42 26 21 e5 c1 69 bc 17 97 ab a0 8a 6a 10 42 bd 24 3e 67 f6 ec da 25 14 28 0d 75 02 0f 48 08 54 a4 92 aa e4 a1 94 92 50 35 71 13 db bb 67 77 bd 89 bd cc d9 d8 84 48 ae 62 3b de 62 ef f9 ff a4 bf 66 bd 96 fc 64 9d 9f e6 fb be 33 43 00 00 00 00 b0 42 f4 f7 57 d7 59 df cd 6f 8c a7 bc 87 63 e9 d2 3e 6b a0 f0 4d 24 78 89 0e 4c ec df fa e8 78 22 f2 ad 7f ff 40 f6 9d 3e c4 fb 4e ff 5c c7 16 7d 6f 3e 27 fa ce fc 5a ec 3d f3 62 64 ef 5b 63 91 fd 67 8f 77 ec 39 7e 94 f2 e1 0c 13 ea b0 21 9d a7 0c Data Ascii: PNGIHDR0\|TFIDATx[l\GGq[j-Qb:=K6@#KPU!(B&!ijB$>g%(uHTP5qgwHb;bfd3CBWYoc>kM$xLx"@>N\}o>'Z=bd[cgw9~!
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 53 d3 39 a9 65 33 c6 84 f3 a4 21 dd af 32 d3 dd d1 12 55 ed d4 54 ef 27 00 80 d5 df 8f f1 25 63 f9 92 49 43 32 c8 bb 08 e6 c1 13 57 04 53 f7 a8 ab 76 3f ec bf e2 c9 4d 50 91 7b 5b 7f f7 37 26 ec 17 b4 74 9e 08 0b f5 85 70 c4 fe f8 86 88 ba 9d 00 00 56 e3 4e 46 35 f5 a4 4a cd ba 16 ff 1d 2b 35 3d 6e 25 bd c0 3f 54 91 b9 24 97 2e 98 fa 8b 47 4b 87 bb 15 26 b3 05 2d 9e f3 fa bb 33 3a 27 28 b7 87 18 b7 bf dc 12 cd dd 7d 9b f8 d9 2d 04 00 b0 7a 76 32 b1 83 13 6d b1 54 e1 fb 56 aa 52 84 64 90 5a 92 de 0a 08 a6 fe e2 61 7e 8f 47 8e 78 7a bd 10 e2 ea 4d fd fd 4b 54 b8 07 98 50 bb 9b b7 0c 37 13 00 c0 ea e8 c9 58 e9 e2 68 3c 7d d1 83 64 90 9a 60 0e 4e 55 3b 3e 7d 7c 5e 30 6b 23 22 53 31 e4 c8 94 5e cf 69 d1 bc c2 b8 33 4c fd 72 9a 39 7c 4f 73 cf d8 fb 08 00 e0 ff Data Ascii: S9e3!2UT'%cIC2WSv?MP{[7&tpVNF5J+5=n%?T$.GK&-3:'(}-zv2mTVRdZa~GxzMKTP7Xh<}d`NU;>}\|^0k#"S1^i3Lr9\|Os
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 20 18 b0 82 a7 30 97 0e 5b 89 52 3e f0 0f 74 08 e6 3f ec 9d 4f 68 1c 55 1c c7 eb a1 05 b5 50 2f 22 24 33 bb c9 f6 66 11 c1 1e da 9d d9 6d b3 ef 4d a3 a9 88 62 0d 68 11 73 2b ea ad 08 4a f1 90 25 ec bc 97 58 4f 95 1e 8a 27 2d 68 f6 cd 26 22 82 7f ea 41 14 a4 28 f1 4f 63 d3 d2 7a 10 5b 28 36 91 98 ec ee bc 9d cd a6 19 67 77 b3 61 b5 08 ad 79 49 76 77 be 1f f8 5e e7 f8 3e bc f9 fe de 7b c8 5d 24 62 4e 96 75 23 7b 3e 7a 50 c4 db fa b7 58 b0 73 e9 8e 8b cb 0d b9 40 30 40 a9 64 68 26 3f 44 79 e9 37 82 5d 4c 8b 0a e6 b3 d0 2f e6 2d 9b e4 c4 b2 66 e4 ae 44 8d ec 91 76 94 4b 57 fc ac a1 19 ce 74 a3 73 81 60 80 32 06 d3 33 3b fa 32 c5 21 62 97 7e 21 4c 56 42 bf a0 b7 a8 60 62 10 4c 6b c7 74 aa bd cc 5c 4f d2 39 a1 c5 c5 bd 6d d3 b9 90 da ce e5 92 b6 ba 73 81 60 80 Data Ascii: 0[R>t?OhUP/"$3fmMbhs+J%XO'-h&"A(Ocz[(6gwayIvw^>{]$bNu#{>zPXs@0@dh&?Dy7]L/-fDvKWts`23;2!b~!LVB`bLkt\O9ms`
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 0c f8 9b bd 73 8b 8d a3 3a e3 f8 c6 84 00 e5 4e a1 a8 f1 19 27 5c 52 a9 31 04 44 04 ce ce ac c3 ce 39 93 40 44 40 08 11 51 54 b5 bc 20 a8 2a fa 00 02 2a f5 01 26 b1 cf 99 49 82 80 52 2e 02 a9 05 71 49 76 67 d7 01 04 08 68 41 a8 20 48 69 10 f0 82 40 50 89 a2 f0 40 44 c1 8e e7 ba 8e ed e9 99 43 56 aa 2a 23 bc f6 da 3b 76 fe 3f e9 af 5d c9 6f 5e ef f9 f9 fb be 73 ce b4 4a d6 1a 1b f0 af d9 e0 36 3e 64 6e 82 05 15 99 4a 30 a8 60 10 08 06 b4 0e 13 fe 6a ea c4 bb 98 88 27 a8 08 b0 a0 22 53 b5 c8 50 c1 20 10 0c 68 8d b2 9d 9e 40 79 f0 7b ca a3 af a5 64 b0 98 22 68 91 21 10 0c 68 0f 4c 84 9b a9 93 bc c7 1c b4 c6 10 08 06 81 60 40 9b a0 83 f1 0a 4b 84 8f 51 11 1d c2 75 30 08 04 83 40 30 a0 2d 6c 7a e0 b3 63 ca 83 fe 6f 98 93 7c c1 d0 1a 43 20 18 04 82 01 ed 82 39 Data Ascii: s:N'\R1D9@D@QT *&IR.qIvghA Hi@P@DCV#;v?]o^sJ6>dnJ0`j'"SP h@y{d"h!hL`@KQu0@0-lzco\|C 9
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 33 ef 9f f2 5e 33 2c d2 10 0c 98 0e 65 3b 5d ca 44 78 33 15 d1 7e 08 26 1f b1 b6 8f 4b b9 44 9f 98 3c b8 ac d7 4e 97 4d ff fe b8 c6 6a c6 c3 bd cd 76 59 5e 04 43 07 46 a8 12 cc 22 20 7b f4 73 b6 cb 0c 5b 99 21 18 30 0d 2e 77 e2 95 59 0b 86 89 70 02 5b 93 3b 1c 11 1e 96 4b f2 26 e5 e1 45 5b bc 96 17 65 d5 2e a3 4e fc 76 53 32 39 98 c1 48 c1 f8 8b 45 30 4d c9 1c 47 f4 ea 63 78 c0 19 04 03 7e 00 53 8c 5e 65 39 c9 fb 18 ee 77 5e 2e 6a e6 c2 a3 ba 65 27 67 17 6c bb ab 30 23 9a 33 99 b8 39 93 e9 74 05 13 98 5b 47 98 12 cc 22 62 6d b6 95 d9 a8 ed 94 99 84 64 20 18 30 05 e5 87 d2 13 28 f7 ef 66 3c c2 70 bf 93 11 91 8a 29 82 3f 96 ed d1 d3 0b b3 47 b5 cb 4c 1e be 65 b9 87 d4 4c a6 a3 82 e1 81 12 cc 62 dc 7d 49 8a 95 3b 88 51 1b c7 36 66 08 06 fc 1f 8c 07 6b 2c 11 Data Ascii: 3^3,e;]Dx3~&KD<NMjvY^CF" {s[!0.wYp[;K&E[e.NvS29HE0MGcx~S^e9w^.je'gl0#39t[G"bmd 0(f<p)?GLeLb}I;Q6fk,
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 53 05 ff fe 4e 95 2d 4d 9c c2 53 d0 0d 5b 09 46 af c7 31 72 92 ff ed d9 ea a3 b6 1b 72 81 60 52 be 3d 59 a8 fc 45 b6 90 bf 24 38 50 e9 d6 37 cf 7b 6a 7f 36 93 42 28 af de 4a 1c 7f e7 49 5d 97 1d a9 60 9a 46 0a 46 cb e5 1d 25 97 ca 0f dd 7d 90 0b 04 93 5e f4 10 1d f5 9a ef 63 b9 65 82 c1 3e 0f 6a d1 87 54 07 fb 29 c5 7e 3e 0a fe 03 9d c9 9c 8c 60 28 13 77 9b 26 98 ae 05 3a 73 d9 85 cc 05 82 49 3d c4 11 8b a9 d7 f8 02 82 49 ee 8d 17 ca e4 06 aa 1f 10 4b 37 77 3e df ce 64 5a 13 10 cc 24 72 e9 1b 46 e6 02 c1 98 b1 9e bf c0 c4 43 94 05 fb 21 98 24 aa 97 20 b4 59 50 25 83 ad 52 8f 9a 35 ca 18 00 8d 32 19 47 7c 79 5c c9 44 95 9d 16 4c c3 18 c1 64 73 95 59 c8 5c 20 18 63 b8 8b 87 17 13 b7 ee 10 2e 6b 68 51 4e 26 7b a1 4c 8e 50 16 5e 62 58 ae a7 24 53 d7 99 cc e4 Data Ascii: SN-MS[F1rr`R=YE$8P7{j6B(JI]`FF%}^ce>jT)~>`(w&:sI=IK7w>dZ$rFC!$ YP%R52G\|y\DLdsY\ c.khQN&{LP^bX$S
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 47 83 df ac 12 d9 20 19 fb ca 78 80 9b 00 26 43 cf e5 67 ab 13 e1 82 80 01 5c 14 7b 43 33 a8 ac a3 21 60 cc 0b 98 f9 5b 62 9b 4b 71 05 7f 9a 97 c5 54 2a 8b a9 c7 2d 98 b9 20 60 10 30 fc 94 4a 03 f9 9e ca 58 1b 56 90 99 f8 88 e4 ca 6b 1b 67 6f ba f2 84 00 d0 73 81 08 98 4c 86 4a 39 45 a2 74 ed 88 28 21 60 cc b9 07 59 74 d0 53 d1 b7 c6 78 04 82 00 d2 b0 2c d6 98 67 41 cf 05 22 60 cc 41 f4 85 4b 45 5f ec 18 02 c6 a4 5b f4 57 84 7b c5 8a e8 b2 b2 1d 58 a2 9c 9e 4b 91 35 ea b9 04 11 2e 30 ae d5 c9 06 ac 0e f6 81 00 78 67 30 91 c5 14 2e 1d 58 a2 6c ce 23 92 29 ac 3b 45 5f 48 8c 3f f6 17 a4 57 b8 c4 7b 2e 08 17 38 6a 06 73 95 5e 37 09 80 37 60 fa 57 88 52 f8 37 04 8c 39 4b 94 45 29 f6 5d 49 65 78 a6 00 d2 2a 5c d0 73 81 e3 04 4c c8 e6 54 3f 11 00 6f c0 84 5f 15 Data Ascii: G x&Cg\{C3!`[bKqT- `0JXVkgosLJ9Et(!`YtSx,gA"`AKE_[W{XK5.0xg0.Xl#);E_H?W{.8js^77`WR79KE)]Iex\sLT?o_
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 17 10 0c 29 c5 3b f4 1b b2 2c 5b 98 00 00 20 18 12 e9 c8 fd 17 d4 5c 00 00 c1 10 6a 2e 00 80 60 c8 ff 5f 73 c9 b2 ec 18 72 01 00 04 43 a2 c4 6d 37 29 69 74 60 60 a0 8e 9a 0b 00 20 18 12 4d 2e 6e b7 71 8b e5 60 4b 4b 0b 33 17 00 40 30 24 ca b2 d8 d7 20 17 b7 dd 21 e4 02 00 08 86 c4 9c b9 8c f9 3b 72 01 00 04 43 e2 c4 ed 34 e9 8c 0f 0e 0e b2 2c 06 00 08 86 c4 ad b9 38 c8 05 00 10 0c 89 26 17 6a 2e 00 80 60 48 f4 65 31 6a 2e 00 80 60 48 f4 99 0b 35 17 00 40 30 a4 34 72 61 e6 02 00 08 86 44 af b9 48 3a 8c 5c 20 90 65 d9 fc 04 00 c1 90 18 cf b9 b0 5b 0c a6 09 67 cc 59 30 db 3b 3a 3a 16 25 00 08 86 b0 15 19 62 d1 d7 d7 57 ef d3 1b c6 fd 2a 86 26 24 03 08 86 50 73 81 28 b4 b5 b5 2d 93 74 73 78 78 38 ec 28 9c 70 ff 38 c9 a9 d9 80 60 c8 1f d5 5c 24 3d f2 a9 c8 d4 Data Ascii: );,[ \j.`_srCm7)it`` M.nq`KK3@0$ !;rC4,8&j.`He1j.`H5@04raDH:\ e[gY0;::%bW*&$Ps(-tsxx8(p8`\$=
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 37 13 1c b2 c8 3c e3 01 e3 7a f6 6c 3f f7 5c 8b cb f3 5c 19 bb 44 ba 4d 3f ca 87 21 6b 3d d4 3a 2d e9 43 d3 8a 27 83 21 30 50 4a 12 77 4a d2 01 87 77 36 fb de 5f 43 7e a6 24 af 65 81 a4 66 b7 df 2b 6e bf 89 22 89 fc 5a f6 64 b2 92 6e 46 64 30 04 06 4a ad 00 30 61 7a 1d e2 d9 e4 29 b6 08 4d 91 fd f2 9d 6b 59 ee f6 7a 3a bc bf 7c bb d5 63 7f 09 91 f9 c0 63 c5 5a 44 06 43 60 a0 e4 29 cd 3e 1e 77 1f e8 f5 40 7a 5f 5f 5f df f2 9e 9e 9e cb 33 19 84 c5 2c b3 97 b7 c5 ed 73 50 d2 29 b7 55 bd ff 28 09 91 19 71 3f 59 83 c8 60 08 0c 94 9c 9f c9 e7 13 26 24 ed 77 8e e1 09 7b 35 2b f3 93 01 ea 69 20 89 12 2f 8d 21 2c 16 da 47 25 bd 67 fe cc 4f 92 a8 fb 7e 52 10 19 49 c3 23 23 23 eb 10 19 0c 81 81 b9 78 34 53 3e 7e 22 69 bb 69 1d 1d 1d 5d 9a f7 6a 2e aa d5 bd 5a 62 ca Data Ascii: 7<zl?\\DM?!k=:-C'!0PJwJw6_C~$ef+n"ZdnFd0J0az)MkYz:\|ccZDC`)>w@z___3,sP)U(q?Y`&$w{5+i /!,G%gO~RI###x4S>~"ii]j.Zb
2025-03-13 11:22:53 UTC	1378	IN	Data Raw: 49 29 5f 71 e4 e2 e4 8d 2f 8e 3e 96 17 d8 13 d9 21 23 3d a6 09 c9 00 90 80 72 39 4c 44 2f 08 04 82 f1 e8 f5 a9 3f 11 d1 3c 86 e5 e2 4e 5a fe d1 27 f2 ca 77 37 05 cd 48 af c2 4c 06 80 44 d9 8e 3c c4 9c 30 0c 63 a1 40 20 18 0f 66 2e 03 ff 59 16 bb 66 ac 31 6f e5 1f 79 69 4b 45 d3 7e 83 c2 57 21 19 00 e2 7f 3b 72 38 1c 3e c3 fd e5 44 34 46 20 10 8c e6 ff 5e 06 f8 7b b6 b9 96 c5 ae 15 9f 35 76 59 c1 a1 d7 8b 82 0d cd 64 56 f7 63 fb 32 00 71 3b 73 b1 05 73 9e fb 9f 10 d1 38 81 40 30 ba e5 c2 1c e5 fe 0a b7 5c ae 9d 59 79 d6 b8 0f 0a 9b df 2d 32 ea 7f 97 2a 84 33 32 00 c4 a1 5c 78 59 fc 22 f7 f3 89 28 45 20 10 8c 07 72 f9 83 bf 5f 3a 11 4d 16 37 98 d4 cf ac 94 74 df c1 2c bf 51 7f 9c 54 15 24 03 40 7c cd 5c da b9 f5 0f 8f 7d 04 82 d1 5d 73 b1 e5 c2 fd 8c 91 fc Data Ascii: I)_q/>!#=r9LD/?<NZ'w7HLD<0c@ f.Yf1oyiKE~W!;r8>D4F ^{5vYdVc2q;ss8@0\Yy-2*32\xY"(E r_:M7t,QT$@\|\}]s

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:52 UTC	685	OUT	GET /fpc?analytics_tag_id=PUB_17023&tfpvi=&gdpr_consent=&gdpr_status=22&gdpr_reason=220&ccpa_consent=&sv=prebid-v1 HTTP/1.1 Host: at.teads.tv Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: text/plain sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:53 UTC	335	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://observalgerie.com Expires: Thu, 13 Mar 2025 11:22:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 13 Mar 2025 11:22:53 GMT Connection: close

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:01:17 15:02:10], baseline, precision 8, 1536x931, components 3
Category:	downloaded
Size (bytes):	162055
Entropy (8bit):	7.926756847931252
Encrypted:	false
SSDEEP:	3072:ikh8dT2pUNxrd5ZYF6ejaqUeKfYWEITpGEkSbheJ5kdun7W:Zh8dTXxrd5ZcMqUeKf4ITplIkwn7W
MD5:	B90803EB35001FF35E7CB463454D182E
SHA1:	2B5416A56DFC158FF84446322311CCD07C6E55A3
SHA-256:	8ACFF394A5DC4EE9EE323A312758769313F6E178A9FE3496DBADBA1C5D876E3C
SHA-512:	3C30B34FD7746F24D55ED98435FB19E4026DF5F5B29F99024823759E1F6DB91911C4573BA36B601D183281BDD40DCA382577CFE7B5590771E5CDFABA9B6FD200
Malicious:	false
Reputation:	low
URL:	https://observalgerie.com/wp-content/uploads/2022/01/credit-agricole-1536x931.jpg
Preview:	......JFIF.....H.H......Exif..MM..............................b...........j.(...........1....."...r.2...........i.................H.......H....Adobe Photoshop CC 2019 (Windows).2022:01:17 15:02:10......................................................................"............(.....................2...........x.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................a...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..`\|..p..<...]..e..G...0&e.-@..D..WN.Dp.1.Q+J......T....I0)...$...)...B.Y..l..$V..DHc.....aw.U.....U...x..3.ZO.b=.q.....M$../.e;..T

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	392553
Entropy (8bit):	5.2898628640030045
Encrypted:	false
SSDEEP:	6144:r22NVVulYkeRUs4pBj6hvEDaPjlefU9WH9SSOu4D/A0afvI3zy5rd3Y8QFND:62NVVuSkeRUs4pBj6hvEDaPjlefhH0SK
MD5:	0ACF80D8B6FAD1E690A58CFD244AB257
SHA1:	B223B3A389A37E8C4611F91EE086AC8D62E32AF1
SHA-256:	95E54D63EAA4361292503A9111B9768F854D7CA5F6E973123A2D2153294AE936
SHA-512:	3997E80C0840BB94D6CCB70813E6A552423879386CC0EFF8FF1EAB3576B8364E3D066E4376E0EA08F2FE50C51836BB8B198ADDE8FBB7E2897F4497BAE894FCCE
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v25.310.1952 - 2025-03-10 19:52:31 /.!function(){"use strict";var t=function(n,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,n){t.__proto__=n}\|\|function(t,n){for(var e in n)Object.prototype.hasOwnProperty.call(n,e)&&(t[e]=n[e])},t(n,e)};function n(n,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function i(){this.constructor=n}t(n,e),n.prototype=null===e?Object.create(e):(i.prototype=e.prototype,new i)}var e=function(){return e=Object.assign\|\|function(t){for(var n,e=1,i=arguments.length;e<i;e++)for(var r in n=arguments[e])Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r]);return t},e.apply(this,arguments)};function i(t,n){var e={};for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&n.indexOf(i)<0&&(e[i]=t[i]);if(null!=t&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(i=Object.getOwnPropertySymbols(t);r<i

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1536x931, components 3
Category:	dropped
Size (bytes):	110280
Entropy (8bit):	7.943520535217573
Encrypted:	false
SSDEEP:	1536:D/ZcvVioZEAS0v5w4XUTrWZRGDp8UAbXfuRVSeF3f8qqYMSMj0BNjRJw9nffdH:jZK3vLXU+yDsLG8qhnMZwNjRyVfB
MD5:	0373657C53FDFF1EDB8A2DD1D19B76DA
SHA1:	727880C14DDB60797131051D5EC569868E2F89EC
SHA-256:	CEFB796D964813B3A5337A4DCAF3BCCA75B95C6CACC2AE1C3146CDCF42291149
SHA-512:	9F6F006EA53432B5FD20B32677033804AD35070436E7CFA1C155FA15272F40FC8E1E2CCC630216D1A5AB0E818F44497FAC7D04DB3B2764E8FBFFAA7A645299A4
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress....Exif..II*...........................V...........^...(.......................i.......f.......`.......`.................0210....................0100...........................................$http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2025-01-16</Attrib:Created>. <Attrib:ExtId>17734d7e-a310-484c-88ee-91e6bf3b2e56</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Ob

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:52 UTC	664	OUT	POST /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 166 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:52 UTC	166	OUT	Data Raw: 7b 22 65 6e 61 62 6c 65 64 53 74 6f 72 61 67 65 54 79 70 65 73 22 3a 5b 22 68 74 6d 6c 35 22 5d 2c 22 6e 61 6d 65 22 3a 22 69 64 35 49 64 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 61 72 74 6e 65 72 22 3a 31 7d 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 65 78 70 69 72 65 73 22 3a 33 36 35 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 31 34 34 30 30 7d 2c 22 62 6f 75 6e 63 65 22 3a 74 72 75 65 7d Data Ascii: {"enabledStorageTypes":["html5"],"name":"id5Id","params":{"partner":1},"storage":{"name":"id5id","type":"html5","expires":365,"refreshInSeconds":14400},"bounce":true}
2025-03-13 11:22:53 UTC	620	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://observalgerie.com vary: Origin access-control-allow-credentials: true p3p: CP="CAO PSA OUR" set-cookie: id5=5c66cd32-ab95-7c9b-99f0-555dfbe53970#1741864973231#1; Max-Age=7776000; Expires=Wed, 11-Jun-2025 11:22:53 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 13 Mar 2025 11:22:52 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2025-03-13 11:22:53 UTC	198	IN	Data Raw: 43 30 0d 0a 7b 22 66 65 74 63 68 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 67 2f 76 32 2f 31 2e 6a 73 6f 6e 22 2c 22 6f 76 65 72 72 69 64 65 73 22 3a 7b 22 70 62 45 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 62 6f 75 6e 63 65 22 3a 7b 22 73 65 74 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 7d 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 43 61 6c 6c 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 62 2e 65 75 2d 31 2d 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6c 62 2f 76 31 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 7d 7d 0d 0a Data Ascii: C0{"fetchCall":{"url":"https://id5-sync.com/g/v2/1.json","overrides":{"pbExtensions":{"bounce":{"setCookie":true}}}},"extensionsCall":{"url":"https://lb.eu-1-id5-sync.com/lb/v1","method":"GET"}}
2025-03-13 11:22:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:55 UTC	431	OUT	GET /gh/prebid/currency-file@1/latest.json?date=20250313 HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:55 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1590 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/json; charset=utf-8 X-JSD-Version: 1.0.2358 X-JSD-Version-Type: version ETag: W/"636-8PLcxSN2QWQSCsPoJBamOlRqxKE" Accept-Ranges: bytes Date: Thu, 13 Mar 2025 11:22:55 GMT Age: 26520 X-Served-By: cache-fra-eddf8230103-FRA, cache-mia-kmia1760068-MIA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-13 11:22:55 UTC	1378	IN	Data Raw: 7b 22 64 61 74 61 41 73 4f 66 22 3a 22 32 30 32 35 2d 30 33 2d 31 32 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 2c 22 67 65 6e 65 72 61 74 65 64 41 74 22 3a 22 32 30 32 35 2d 30 33 2d 31 32 54 31 36 3a 30 30 3a 33 35 2e 32 39 34 5a 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 73 22 3a 7b 22 55 53 44 22 3a 7b 22 55 53 44 22 3a 31 2c 22 4a 50 59 22 3a 31 34 39 2e 30 32 36 32 37 32 32 37 36 33 31 38 32 2c 22 42 47 4e 22 3a 31 2e 37 39 36 36 31 39 35 31 31 32 39 38 39 31 36 2c 22 43 5a 4b 22 3a 32 32 2e 39 37 37 32 31 38 34 34 35 37 31 30 30 38 36 2c 22 44 4b 4b 22 3a 36 2e 38 35 32 30 31 31 37 35 38 32 32 31 35 36 39 2c 22 47 42 50 22 3a 30 2e 37 37 32 33 34 39 38 30 37 30 39 31 36 37 37 33 2c 22 48 55 46 22 3a 33 36 37 2e 32 34 32 33 32 39 35 39 37 36 34 38 33 Data Ascii: {"dataAsOf":"2025-03-12T00:00:00.000Z","generatedAt":"2025-03-12T16:00:35.294Z","conversions":{"USD":{"USD":1,"JPY":149.0262722763182,"BGN":1.796619511298916,"CZK":22.977218445710086,"DKK":6.852011758221569,"GBP":0.7723498070916773,"HUF":367.2423295976483
2025-03-13 11:22:55 UTC	212	IN	Data Raw: 30 34 39 34 33 30 32 39 30 39 34 2c 22 4d 58 4e 22 3a 32 36 2e 32 30 39 34 37 32 31 35 36 38 30 36 37 37 35 2c 22 4d 59 52 22 3a 35 2e 37 33 36 33 34 30 30 36 35 31 37 37 35 37 34 2c 22 4e 5a 44 22 3a 32 2e 32 36 36 34 36 36 38 35 32 32 30 38 36 36 33 35 2c 22 50 48 50 22 3a 37 34 2e 32 37 35 30 37 37 39 30 33 38 35 31 31 38 2c 22 53 47 44 22 3a 31 2e 37 32 37 38 30 30 33 37 35 38 34 31 34 38 30 36 2c 22 54 48 42 22 3a 34 33 2e 38 33 34 32 39 36 37 32 34 34 37 30 31 33 36 2c 22 5a 41 52 22 3a 32 33 2e 38 31 36 39 33 31 38 39 36 35 37 32 32 33 32 2c 22 45 55 52 22 3a 31 2e 31 38 39 33 37 31 37 37 33 38 32 39 30 36 33 35 7d 7d 7d Data Ascii: 04943029094,"MXN":26.209472156806775,"MYR":5.736340065177574,"NZD":2.2664668522086635,"PHP":74.27507790385118,"SGD":1.7278003758414806,"THB":43.834296724470136,"ZAR":23.816931896572232,"EUR":1.1893717738290635}}}

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:55 UTC	459	OUT	GET /api/config/prebid HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: id5=5c66cd32-ab95-7c9b-99f0-555dfbe53970#1741864973231#1
2025-03-13 11:22:56 UTC	304	IN	HTTP/1.1 400 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Thu, 13 Mar 2025 11:22:55 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2025-03-13 11:22:56 UTC	45	IN	Data Raw: 32 32 0d 0a 70 61 72 74 6e 65 72 20 70 61 72 61 6d 65 74 65 72 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 0d 0a 30 0d 0a 0d 0a Data Ascii: 22partner parameter must not be null0

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:55 UTC	564	OUT	GET /lb/v1 HTTP/1.1 Host: lb.eu-1-id5-sync.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:56 UTC	379	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://observalgerie.com vary: Origin content-type: application/json;charset=UTF-8 transfer-encoding: chunked date: Thu, 13 Mar 2025 11:22:55 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2025-03-13 11:22:56 UTC	56	IN	Data Raw: 32 44 0d 0a 7b 22 6c 62 22 3a 22 36 43 52 73 7a 4c 58 75 46 72 44 6e 73 2b 63 67 70 44 31 52 4a 51 3d 3d 22 2c 22 74 74 6c 22 3a 32 38 38 30 30 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2D{"lb":"6CRszLXuFrDns+cgpD1RJQ==","ttl":28800}0

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:55 UTC	610	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CLbgygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:56 UTC	787	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 13 Mar 2025 11:22:56 GMT Expires: Thu, 13 Mar 2025 11:22:56 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 793 / 20160 / m202503060101 / config-hash: 17319049669860834488 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 111037 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 11:22:56 UTC	591	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 71 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var q,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=type
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 75 3d 7b 7d 2c 66 61 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 66 61 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a Data Ascii: c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",u={},fa={},v=function(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 76 28 75 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 69 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 Data Ascii: ble:!0,writable:!0,value:function(){return ha(aa(this))}})}return a},"es6");var ha=function(a){a={next:a};a[v(u.Symbol,"iterator")]=function(){return this};return a},ia=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.protot
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 76 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 72 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 73 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 Data Ascii: ="function"?v(Object,"assign"):function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)ra(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|sa},"es6");var ua=function(){for(var a=Number(this),b=[],c=a;c<a
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 75 72 6e 20 63 28 67 29 26 26 72 61 28 67 2c 64 29 26 26 72 61 28 67 5b 64 5d 2c 74 68 69 73 2e 67 29 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 63 28 67 29 26 26 72 61 28 67 2c 64 29 26 26 72 61 28 67 5b 64 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 66 7d 2c 22 65 73 36 22 29 3b 77 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 76 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 Data Ascii: urn c(g)&&ra(g,d)&&ra(g[d],this.g)};f.prototype.delete=function(g){return c(g)&&ra(g,d)&&ra(g[d],this.g)?delete g[d][this.g]:!1};return f},"es6");w("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!v(a.prototype,"entries")\|\|typeof Object.seal!
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ;c.prototype.entries=function(){return e(this,function(h){return[h.key,h.value]})};c.prototype.keys=function(){return e(this,function(h){return h.key})};c.prototype.values=function(){return e(this,function(h){return h.value})};c.prototype.forEach=function
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 75 2e 4d 61 70 3b 69 66 28 63 29 7b 63 3d 7a 28 63 29 3b 66 6f 72 28 76 61 72 20 64 3b 21 28 64 3d 63 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 Data Ascii: lue[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new u.Map;if(c){c=z(c);for(var d;!(d=c.next()).done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;ret
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 77 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 76 61 28 74 68 69 73 2c 62 2c 22 69 6e Data Ascii: +" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};w("String.prototype.includes",function(a){return a?a:function(b,c){return va(this,b,"in
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 76 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 67 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f Data Ascii: a?a:function(b,c){var d=va(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0;g<f&&c<e;)if(d[c++]!=b[g++])return!1;return g>=f}},"es6");var wa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:functio
2025-03-13 11:22:56 UTC	1378	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 42 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 42 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var B=this\|\|self,xa=function(a){a=a.split(".");for(var b=B,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ya=function(a){var b=typeof a;return b!="object"?b:a?Array

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:56 UTC	568	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:57 UTC	1432	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 227349 Content-Type: application/javascript Date: Thu, 13 Mar 2025 11:22:57 GMT ETag: "67c955dd-37815" Expires: Thu, 13 Mar 2025 12:22:57 GMT Last-Modified: Thu, 06 Mar 2025 07:59:25 GMT Set-Cookie: i=zixEP7qenj71s+jtHtaKZsBBngwqxeUMknlQRBo/6ekv0WGA0pQphi7nlnzJOIoY+xKBz95zISXCn3odTat3zrxWNek=; Expires=Sat, 13-Mar-2027 11:22:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=7460518511741864977; Expires=Sat, 13-Mar-2027 11:22:57 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=6957024271741864977; Path=/; Domain=.yandex.ru; Expires=Fri, 13 Mar 2026 11:22:57 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCRgMu+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.ru; Expires=Fri, 17 Apr 2026 11:22:57 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-13 11:22:57 UTC	5319	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e Data Ascii: (function(){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function q(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 2e 61 70 70 6c 79 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 3a 62 7d 76 61 72 20 68 62 3d 45 28 5b 31 2c 6e 75 6c 6c 5d 2c 67 62 29 2c 69 62 3d 45 28 5b 31 2c 30 5d 2c 67 62 29 2c 6a 62 3d 42 6f 6f 6c 65 61 6e 2c 6b 62 3d 78 61 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2c 22 66 69 6c 74 65 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 59 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 61 28 64 2c 65 29 26 26 63 2e 70 75 Data Ascii: .apply)return function(){return d.apply(b,arguments)}}catch(e){return c}return d}function gb(a,b,c){return c?a:b}var hb=E([1,null],gb),ib=E([1,0],gb),jb=Boolean,kb=xa(Array.prototype.filter,"filter");function lb(a,b){return Ya(function(c,d,e){a(d,e)&&c.pu
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 6c 6c 28 6b 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 64 28 68 2c 6d 29 7d 2c 63 29 3b 72 65 74 75 72 6e 7d 7d 65 5b 68 5d 3d 6b 3b 30 3d 3d 3d 2d 2d 66 26 26 62 28 65 29 7d 63 61 74 63 68 28 6d 29 7b 63 28 6d 29 7d 7d 69 66 28 21 61 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 63 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 61 6c 6c 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 62 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 66 3d 65 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c Data Ascii: ll(k,function(m){d(h,m)},c);return}}e[h]=k;0===--f&&b(e)}catch(m){c(m)}}if(!a\|\|"undefined"===typeof a.length)return c(new TypeError("Promise.all accepts an array"));var e=Array.prototype.slice.call(a);if(0===e.length)return b([]);for(var f=e.length,g=0;g<
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 61 29 3b 31 45 33 3d 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 63 2e 73 68 69 66 74 28 29 3b 63 2e 70 75 73 68 28 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 58 64 28 61 29 2c 65 3d 63 2e 65 61 2c 66 3d 63 2e 62 61 2c 67 3d 63 2e 24 61 2c 68 3d 63 2e 61 62 3b 63 3d 63 2e 55 63 3b 76 61 72 20 6b 3d 7b 7d 2c 6c 3d 7b 7d 2c 6d 3d 7b 7d 3b 46 65 28 61 2c 28 6d 2e 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 22 2c 6d 2e 64 61 74 61 3d 28 6c 2e 75 72 6c 3d 62 2c 6c 2e 72 65 71 75 65 73 74 49 64 3d 64 2c 6c 2e 73 65 6e 64 65 72 50 61 72 61 6d 73 3d 28 6b 2e 72 42 6f 64 79 3d 66 2c 6b 2e 64 65 62 75 67 53 74 61 63 6b 3d 65 2c 6b 2e 72 48 65 61 64 65 72 73 3d 67 2c 6b 2e 72 51 75 65 72 79 3d 68 2c 6b 2e 76 65 72 62 3d 63 2c 6b 29 Data Ascii: a);1E3===c.length&&c.shift();c.push(b)}}function Ge(a,b,c){var d=Xd(a),e=c.ea,f=c.ba,g=c.$a,h=c.ab;c=c.Uc;var k={},l={},m={};Fe(a,(m.name="request",m.data=(l.url=b,l.requestId=d,l.senderParams=(k.rBody=f,k.debugStack=e,k.rHeaders=g,k.rQuery=h,k.verb=c,k)
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 28 61 29 7b 61 3d 4a 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 66 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 7c 7c 7b 7d 2c 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 3d 62 2e 63 6f 6d 70 61 74 4d 6f 64 65 3f 63 3a 51 66 28 61 29 7c 7c 63 7d 66 75 6e 63 74 69 6f 6e 20 53 66 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 77 69 64 74 68 22 29 2c 63 3d 4a 28 61 2c 22 76 69 73 75 Data Ascii: (a){a=J(a,"document");try{return a.getElementsByTagName("body")[0]}catch(b){return null}}function Rf(a){var b=J(a,"document")\|\|{},c=b.documentElement;return"CSS1Compat"===b.compatMode?c:Qf(a)\|\|c}function Sf(a){var b=J(a,"visualViewport.width"),c=J(a,"visu
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 72 6e 20 6e 75 6c 6c 3b 62 3d 4f 28 62 29 3b 61 3d 47 66 28 61 2c 62 29 3b 62 3d 28 61 2e 43 28 22 72 65 71 4e 75 6d 22 2c 30 29 7c 7c 30 29 2b 31 3b 61 2e 44 28 22 72 65 71 4e 75 6d 22 2c 62 29 3b 69 66 28 61 2e 43 28 22 72 65 71 4e 75 6d 22 29 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 61 2e 6a 63 28 22 72 65 71 4e 75 6d 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 53 67 2e 75 3d 4d 67 2c 53 67 2e 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 71 28 54 66 28 61 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2b 22 78 22 2b 0a 62 7d 2c 53 67 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 73 63 72 65 65 6e 22 29 3b 69 66 28 Data Ascii: rn null;b=O(b);a=Gf(a,b);b=(a.C("reqNum",0)\|\|0)+1;a.D("reqNum",b);if(a.C("reqNum")===b)return b;a.jc("reqNum");return null},Sg.u=Mg,Sg.w=function(a){var b=q(Tf(a));a=b.next().value;b=b.next().value;return a+"x"+b},Sg.s=function(a){var b=J(a,"screen");if(
2025-03-13 11:22:57 UTC	8168	IN	Data Raw: 62 2e 42 65 3b 62 2e 68 64 26 26 66 2e 48 26 26 28 66 2e 48 2e 6e 6f 68 69 74 3d 22 31 22 29 3b 72 65 74 75 72 6e 20 63 28 66 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 68 29 7b 69 66 28 21 62 2e 68 64 29 7b 76 61 72 20 6b 3d 7b 7d 3b 24 68 28 61 2c 62 2c 22 68 22 2c 28 6b 2e 69 64 3d 62 2e 69 64 2c 6b 2e 75 72 6c 3d 64 2c 6b 2e 72 65 66 3d 65 2c 6b 29 2c 62 2e 4f 29 28 29 7d 61 69 28 61 2c 45 28 5b 61 2c 62 2c 68 5d 2c 56 68 29 29 7d 7d 29 5b 22 63 61 74 63 68 22 5d 28 56 28 61 2c 22 68 2e 67 2e 73 22 29 29 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 69 28 61 2c 62 2c 63 29 7b 74 72 79 7b 69 66 28 41 28 62 29 29 7b 76 61 72 20 64 3d 71 28 48 61 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 64 2e 6e 65 78 74 28 29 3b 64 2e 6e 65 78 74 Data Ascii: b.Be;b.hd&&f.H&&(f.H.nohit="1");return c(f,b).then(function(h){if(h){if(!b.hd){var k={};$h(a,b,"h",(k.id=b.id,k.url=d,k.ref=e,k),b.O)()}ai(a,E([a,b,h],Vh))}})["catch"](V(a,"h.g.s"))});function ci(a,b,c){try{if(A(b)){var d=q(Ha(arguments));d.next();d.next
2025-03-13 11:22:58 UTC	8168	IN	Data Raw: 61 72 20 63 6a 3d 7b 44 69 3a 57 61 28 2f 5b 2f 26 3d 3f 23 5d 2f 29 7d 2c 64 6a 3d 57 28 22 67 6f 2e 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 22 67 6f 61 6c 22 3a 63 3b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 72 65 61 63 68 47 6f 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6b 29 7b 69 66 28 21 66 7c 7c 63 6a 5b 63 5d 26 26 63 6a 5b 63 5d 28 66 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 67 2c 6d 3d 68 7c 7c 75 3b 41 28 67 29 26 26 28 6d 3d 67 2c 6c 3d 76 6f 69 64 20 30 2c 6b 3d 68 29 3b 67 3d 7b 7d 3b 76 61 72 20 70 3d 24 68 28 61 2c 62 2c 22 67 72 22 2c 28 67 2e 69 64 3d 62 2e 69 64 2c 67 2e 67 6f 61 6c 3d 66 2c 67 29 2c 6c 29 2c 72 3d 22 67 6f 61 6c Data Ascii: ar cj={Di:Wa(/[/&=?#]/)},dj=W("go.in",function(a,b,c,d){c=void 0===c?"goal":c;var e={};return e.reachGoal=function(f,g,h,k){if(!f\|\|cj[c]&&cj[c](f))return null;var l=g,m=h\|\|u;A(g)&&(m=g,l=void 0,k=h);g={};var p=$h(a,b,"gr",(g.id=b.id,g.goal=f,g),l),r="goal
2025-03-13 11:22:58 UTC	8168	IN	Data Raw: 67 74 68 3b 66 2b 3d 31 29 69 66 28 64 3d 3d 3d 28 61 5b 66 5d 26 26 61 5b 66 5d 2e 6e 6f 64 65 4e 61 6d 65 29 29 7b 69 66 28 62 3d 3d 3d 61 5b 66 5d 29 72 65 74 75 72 6e 20 65 3b 63 26 26 61 5b 66 5d 3d 3d 3d 63 7c 7c 28 65 2b 3d 31 29 7d 7d 72 65 74 75 72 6e 20 30 7d 76 61 72 20 4c 6a 3d 78 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 35 39 2c 62 3d 7b 7d 2c 63 3d 30 3b 63 3c 70 66 2e 6c 65 6e 67 74 68 3b 63 2b 3d 31 29 62 5b 70 66 5b 63 5d 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 29 2c 61 2b 3d 31 3b 72 65 74 75 72 6e 20 62 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 6a 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 22 22 2c 65 3d 4c 6a 28 29 2c 66 3d 59 66 28 62 29 7c 7c 22 2a 22 3b 62 26 26 62 2e 70 Data Ascii: gth;f+=1)if(d===(a[f]&&a[f].nodeName)){if(b===a[f])return e;c&&a[f]===c\|\|(e+=1)}}return 0}var Lj=x(function(){for(var a=59,b={},c=0;c<pf.length;c+=1)b[pf[c]]=String.fromCharCode(a),a+=1;return b});function Mj(a,b,c){for(var d="",e=Lj(),f=Yf(b)\|\|"*";b&&b.p
2025-03-13 11:22:58 UTC	8168	IN	Data Raw: 4c 54 45 52 5f 41 43 43 45 50 54 3a 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 52 45 4a 45 43 54 3a 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 7d 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 2d 31 3a 65 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 21 31 3a 66 3b 76 61 72 20 68 3d 67 28 62 29 3b 69 66 28 41 28 63 29 26 26 28 66 7c 7c 68 3d 3d 3d 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 29 26 26 28 68 26 26 63 28 62 29 2c 21 48 66 28 62 29 29 29 66 6f 72 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 72 65 65 57 61 6c 6b 65 72 28 62 2c 65 2c 64 3f 7b 61 63 63 65 70 74 4e 6f 64 65 3a 67 7d 3a 6e 75 6c 6c 2c 21 31 29 3b 62 2e 6e 65 78 74 4e 6f 64 65 28 29 26 26 21 Data Ascii: LTER_ACCEPT:a.NodeFilter.FILTER_REJECT:a.NodeFilter.FILTER_ACCEPT}e=void 0===e?-1:e;f=void 0===f?!1:f;var h=g(b);if(A(c)&&(f\|\|h===a.NodeFilter.FILTER_ACCEPT)&&(h&&c(b),!Hf(b)))for(b=a.document.createTreeWalker(b,e,d?{acceptNode:g}:null,!1);b.nextNode()&&!

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:57 UTC	577	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:58 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 392553 Connection: close Date: Thu, 13 Mar 2025 11:22:59 GMT Last-Modified: Tue, 11 Mar 2025 19:55:53 GMT ETag: "0acf80d8b6fad1e690a58cfd244ab257" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 d7433132a7c6595c9aab2dc2272e7060.cloudfront.net (CloudFront), 1.1 5c0a79476717d213b9c559bafee1c65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: Nv9WT4QFI8h9Y7IxrzsuybCkxQZDsK9YBhmeXlGvRk5OeUbnMLdIgw==
2025-03-13 11:22:58 UTC	15742	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 35 2e 33 31 30 2e 31 39 35 32 20 2d 20 32 30 32 35 2d 30 33 2d 31 30 20 31 39 3a 35 32 3a 33 31 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v25.310.1952 - 2025-03-10 19:52:31 /!function(){"use strict";var t=function(n,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,n){t.__proto__=n}\|\|function(t,n){for(var e in
2025-03-13 11:22:58 UTC	1227	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 70 75 62 6c 69 73 68 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 73 74 72 69 63 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 5b 74 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 5b 37 39 33 5d 29 7b 63 61 73 65 20 30 3a 72 2e 70 75 73 68 28 22 49 6e 76 61 6c 69 64 20 70 75 62 6c 69 73 68 65 72 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 30 2c 20 63 6f 6e 73 65 6e 74 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 2e 70 75 73 68 28 22 49 6e 76 Data Ascii: ((function(t){var n,o,a;switch(null===(a=null===(o=null===(n=e.publisher)\|\|void 0===n?void 0:n.restrictions)\|\|void 0===o?void 0:o[t])\|\|void 0===a?void 0:a[793]){case 0:r.push("Invalid publisher restrictions 0, consent ".concat(t));break;case 2:r.push("Inv
2025-03-13 11:22:58 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 72 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 6e 2e 72 65 63 6f 72 64 28 42 2c 7b 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 66 72 6f 6d 41 64 64 45 76 65 6e 74 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 65 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 66 72 6f 6d 41 64 64 45 76 65 6e Data Ascii: return r(void 0,void 0,void 0,(function(){var t,i;return o(this,(function(r){switch(r.label){case 0:return[4,n.record(B,{eventListener:null===(t=e.detail)\|\|void 0===t?void 0:t.eventListener,fromAddEvent:null===(i=e.detail)\|\|void 0===i?void 0:i.fromAddEven
2025-03-13 11:22:58 UTC	16384	IN	Data Raw: 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 7b 64 65 74 61 69 6c 3a 6e 75 6c 6c 21 3d 69 3f 69 3a 7b 7d 7d 29 29 7d 2c 65 3d 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 5b 74 68 69 73 2e 72 6f 6f 74 4e 61 6d 65 5d 3b 65 2e 74 72 69 67 67 65 72 46 6f 72 3d 6e 2c 65 2e 74 72 69 67 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6e 28 70 74 2c 74 2c 65 29 7d 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 5f 70 72 69 76 61 74 65 26 26 28 65 2e 5f 70 72 69 76 61 74 65 3d 7b 7d 29 2c 65 2e 5f 70 72 69 76 61 74 65 2e 43 6f 6f 6b 69 65 53 74 6f 72 61 67 65 3d 73 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 65 71 75 69 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 74 68 69 73 2e 63 72 65 61 74 65 55 73 65 72 73 70 61 63 65 52 6f 6f 74 28 29 2c Data Ascii: new CustomEvent(e,{detail:null!=i?i:{}}))},e=this.globalContext[this.rootName];e.triggerFor=n,e.trigger=function(t,e){n(pt,t,e)},void 0===e._private&&(e._private={}),e._private.CookieStorage=st},t.prototype.equip=function(){try{this.createUserspaceRoot(),
2025-03-13 11:22:58 UTC	2048	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 6c 66 6f 72 6d 65 64 20 74 61 72 67 65 74 69 6e 67 20 6f 62 6a 65 63 74 20 61 74 20 22 2e 63 6f 6e 63 61 74 28 4c 74 29 29 3b 76 61 72 20 69 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 67 6f 6f 67 6c 65 74 61 67 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 2e 70 75 62 61 64 73 28 29 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 22 22 2e 63 6f 6e 63 61 74 28 22 69 6c 6c 75 6d 61 5f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 7d 29 29 2c 49 2e 63 6f 6d 70 6c 65 74 65 64 7d 2c 56 74 3d 6e 65 77 20 69 74 28 7b 73 63 6f 70 65 3a Data Ascii: )throw new Error("Malformed targeting object at ".concat(Lt));var i=t.globalContext.googletag;return Object.keys(e).forEach((function(t){var n=e[t];i.pubads().setTargeting("".concat("illuma_").concat(t),JSON.stringify(n))})),I.completed},Vt=new it({scope:
2025-03-13 11:22:58 UTC	16384	IN	Data Raw: 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 64 6f 63 75 6d 65 6e 74 29 2c 61 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 6e 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 61 2c 22 70 78 22 29 3b 74 72 79 7b 76 61 72 20 75 3d 65 28 65 28 7b 7d 2c 74 68 69 73 2e 67 65 74 50 61 67 65 53 74 79 6c 65 73 28 29 29 2c 74 68 69 73 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 73 28 74 29 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 75 6c 6c 3d 3d 6f 7c 7c 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 Data Ascii: indow)\|\|void 0===r?void 0:r.document),a=null==o?void 0:o.body.scrollHeight;n.style.height="".concat(a,"px");try{var u=e(e({},this.getPageStyles()),this.getContainerStyles(t));Object.keys(u).forEach((function(t){null==o\|\|o.documentElement.style.setProperty
2025-03-13 11:22:58 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 32 2c 49 6e 28 6e 65 77 20 78 6e 28 22 63 72 69 74 65 6f 22 29 2e 75 73 69 6e 67 28 52 6e 29 2e 66 72 6f 6d 4c 6f 63 61 6c 53 74 6f 72 61 67 65 4b 65 79 73 28 7a 6e 29 2e 66 6f 72 41 63 63 6f 75 6e 74 28 6e 29 2e 67 65 74 52 75 6e 6e 65 72 28 29 2c 6e 29 5d 7d 29 29 7d 29 29 7d 7d 29 2c 42 6e 3d 6e 65 77 20 69 74 28 7b 73 63 6f 70 65 3a 22 69 64 56 65 6e 64 6f 72 73 22 2c 6f 62 6a 65 63 74 3a 22 66 61 62 72 69 63 6b 22 2c 61 63 74 69 6f 6e 3a 22 67 65 74 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 72 28 76 6f 69 64 20 30 Data Ascii: {return o(this,(function(t){return[2,In(new xn("criteo").using(Rn).fromLocalStorageKeys(zn).forAccount(n).getRunner(),n)]}))}))}}),Bn=new it({scope:"idVendors",object:"fabrick",action:"get",handler:function(t){var n=t.account;return t.customEvent,r(void 0
2025-03-13 11:22:58 UTC	16384	IN	Data Raw: 3d 28 61 3d 6e 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 61 70 73 74 61 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 69 73 47 44 50 52 52 65 67 69 6f 6e 29 3f 5b 32 2c 49 2e 63 6f 6d 70 6c 65 74 65 64 5d 3a 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 67 65 74 48 69 67 68 45 6e 74 72 6f 70 79 56 61 6c 75 65 73 29 3f 5b 33 2c 32 5d 3a 5b 34 2c 6f 69 28 6e 2c 74 2c 65 29 5d 3b 63 61 73 65 20 31 3a 6f 2e 73 65 6e 74 28 29 2c 6f 2e 6c 61 62 65 6c 3d 32 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 32 2c 49 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 7d 29 29 7d 29 29 7d 5d 5d 29 2c 63 69 3d 7b 6b 65 79 3a 22 64 65 76 69 63 65 53 69 67 6e 61 6c 2f 63 6f 6f 6b 69 65 44 65 70 72 Data Ascii: =(a=n.globalContext.apstag)\|\|void 0===a?void 0:a.isGDPRRegion)?[2,I.completed]:"function"!=typeof(null==e?void 0:e.getHighEntropyValues)?[3,2]:[4,oi(n,t,e)];case 1:o.sent(),o.label=2;case 2:return[2,I.completed]}}))}))}]]),ci={key:"deviceSignal/cookieDepr
2025-03-13 11:22:59 UTC	16384	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 65 64 22 29 7d 29 29 2e 63 61 74 63 68 28 69 29 7d 29 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 63 61 74 63 68 28 69 29 2c 21 30 29 3a 22 63 61 6e 63 65 6c 65 64 22 29 7d 28 29 2c 75 3d 72 3e 36 34 30 30 3b 69 66 28 61 7c 7c 75 29 72 65 74 75 72 6e 22 63 61 6e 63 65 6c 65 64 22 3d 3d 3d 61 26 26 69 28 6e 65 77 20 45 72 72 6f 72 28 22 74 63 66 20 74 69 6d 65 6f 75 74 22 29 29 2c 76 6f 69 64 28 75 26 26 69 28 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 74 65 72 76 61 6c 20 6f 76 65 72 22 29 29 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 6f 2c 72 29 2c 72 3d 30 3d 3d 3d 72 3f 32 30 30 3a 32 2a 72 7d 3b 6f 28 29 7d 29 29 7d 76 61 72 20 74 72 2c 6e 72 3d 6e 65 77 20 69 74 Data Ascii: ((function(){e("token generated")})).catch(i)})))\|\|void 0===o\|\|o.catch(i),!0):"canceled")}(),u=r>6400;if(a\|\|u)return"canceled"===a&&i(new Error("tcf timeout")),void(u&&i(new Error("interval over")));setTimeout(o,r),r=0===r?200:2*r};o()}))}var tr,nr=new it
2025-03-13 11:22:59 UTC	3072	IN	Data Raw: 5b 32 2c 49 2e 63 61 6e 63 65 6c 6c 65 64 5d 3a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 65 3d 74 2e 75 73 65 28 74 6f 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 3b 69 66 28 30 3d 3d 3d 28 6e 75 6c 6c 21 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 70 6c 69 74 28 22 5f 22 29 5b 31 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 22 22 3b 69 66 28 30 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 28 69 29 3b 72 65 74 75 72 6e 21 28 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 2d 72 2e 76 61 6c 75 65 4f 66 28 29 3e 3d 32 35 39 32 65 36 29 Data Ascii: [2,I.cancelled]:(function(t){var n,e=t.use(to,{persist:!0});if(0===(null!=e?e:"").length)return!1;var i=null!==(n=null==e?void 0:e.split("_")[1])&&void 0!==n?n:"";if(0===i.length)return!1;var r=new Date(i);return!((new Date).valueOf()-r.valueOf()>=2592e6)

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:58 UTC	527	OUT	OPTIONS /events HTTP/1.1 Host: logs2.sportslocalmedia.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://observalgerie.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:22:58 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 11:22:58 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://observalgerie.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: POST, OPTIONS

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:22:58 UTC	724	OUT	POST /g/v2/1.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive Content-Length: 409 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: id5=5c66cd32-ab95-7c9b-99f0-555dfbe53970#1741864973231#1
2025-03-13 11:22:58 UTC	409	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 22 3a 31 2c 22 67 64 70 72 22 3a 30 2c 22 6e 62 50 61 67 65 22 3a 31 2c 22 6f 22 3a 22 70 62 6a 73 22 2c 22 74 6d 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 62 73 65 72 76 61 6c 67 65 72 69 65 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 63 75 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 62 73 65 72 76 61 6c 67 65 72 69 65 2e 63 6f 6d 2f 22 2c 22 74 6f 70 22 3a 31 2c 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 62 73 65 72 76 61 6c 67 65 72 69 65 2e 63 6f 6d 2f 22 2c 22 76 22 3a 22 39 2e 32 31 2e 30 22 2c 22 73 74 6f 72 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 69 64 35 69 64 22 2c 22 74 79 70 65 22 3a 22 68 74 6d 6c 35 22 2c 22 65 78 70 69 72 65 73 22 3a 33 36 35 2c 22 72 65 66 72 65 73 68 49 6e 53 65 63 6f 6e 64 73 22 3a 31 34 34 Data Ascii: {"partner":1,"gdpr":0,"nbPage":1,"o":"pbjs","tml":"https://observalgerie.com/","ref":null,"cu":"https://observalgerie.com/","top":1,"u":"https://observalgerie.com/","v":"9.21.0","storage":{"name":"id5id","type":"html5","expires":365,"refreshInSeconds":144
2025-03-13 11:22:59 UTC	559	IN	HTTP/1.1 200 OK date: Thu, 13 Mar 2025 11:22:58 GMT p3p: CP="CAO PSA OUR" set-cookie: id5=5c66cd32-ab95-7c9b-99f0-555dfbe53970#1741864973231#2; Path=/; Domain=id5-sync.com; Expires=Wed, 11 Jun 2025 11:22:58 GMT; Max-Age=7776000; SameSite=None; Secure expires: Thu, 01 Jan 1970 00:00:00 GMT access-control-allow-origin: https://observalgerie.com vary: Origin access-control-allow-credentials: true content-type: application/json transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2025-03-13 11:22:59 UTC	865	IN	Data Raw: 33 35 35 0d 0a 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 22 49 44 35 5f 41 71 62 4b 42 5f 5f 7a 7a 7a 46 57 4a 6d 38 73 77 53 59 37 4a 62 32 33 32 53 74 55 30 4b 63 57 43 75 74 78 54 57 70 75 62 4c 30 59 73 50 63 69 69 6e 53 41 2d 45 79 38 72 62 63 42 34 37 37 42 42 65 53 4b 2d 64 37 4c 43 4a 7a 6a 37 7a 48 58 4c 57 6a 77 65 56 57 72 75 41 77 31 76 63 73 66 7a 51 37 63 38 4f 4d 6d 6e 48 35 45 30 50 42 76 32 62 6d 4c 4b 44 72 56 63 54 4b 31 50 47 72 5f 57 38 71 76 51 76 31 67 64 71 49 4f 39 38 2d 56 34 71 46 64 66 64 59 5a 6a 64 58 6c 6a 58 62 30 50 35 4e 36 2d 4b 55 49 4c 55 4d 6b 72 6f 4e 54 6b 6a 59 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 35 2d 30 33 2d 31 33 54 31 31 3a 32 32 3a 35 33 2e 32 33 31 5a 22 2c 22 69 64 35 5f 63 6f 6e 73 65 6e Data Ascii: 355{"signature":"ID5_AqbKB__zzzFWJm8swSY7Jb232StU0KcWCutxTWpubL0YsPciinSA-Ey8rbcB477BBeSK-d7LCJzj7zHXLWjweVWruAw1vcsfzQ7c8OMmnH5E0PBv2bmLKDrVcTK1PGr_W8qvQv1gdqIO98-V4qFdfdYZjdXljXb0P5N6-KUILUMkroNTkjY","created_at":"2025-03-13T11:22:53.231Z","id5_consen

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:00 UTC	639	OUT	POST /events HTTP/1.1 Host: logs2.sportslocalmedia.com Connection: keep-alive Content-Length: 286 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:00 UTC	286	OUT	Data Raw: 5b 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 73 69 74 65 49 64 22 3a 31 32 36 36 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 31 37 61 61 62 62 65 30 2d 37 62 38 32 2d 34 66 34 62 2d 61 38 37 64 2d 39 61 64 64 31 36 30 61 37 66 33 62 22 2c 22 70 61 67 65 76 69 65 77 49 64 22 3a 22 36 34 37 34 66 30 62 34 2d 65 63 38 37 2d 34 35 34 36 2d 38 34 32 38 2d 33 64 62 30 30 30 39 32 30 34 31 37 22 2c 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 6e 73 65 6e 74 22 3a 22 6e 6f 74 61 76 61 69 6c 61 62 6c 65 22 2c 22 63 6d 70 5f 69 64 22 3a Data Ascii: [{"eventType":"pageview","device":"desktop","siteId":1266,"sessionId":"17aabbe0-7b82-4f4b-a87d-9add160a7f3b","pageviewId":"6474f0b4-ec87-4546-8428-3db000920417","os":"Windows","browser":"Google Chrome","path":"/","data":{"consent":"notavailable","cmp_id":
2025-03-13 11:23:01 UTC	227	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Mar 2025 11:23:01 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://observalgerie.com Access-Control-Allow-Credentials: true Allow: POST, OPTIONS

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://observalgerie.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
http://observalgerie.com

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:01 UTC	694	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fobservalgerie.com&pubid=8a83e099-851b-4737-9ca3-c7092ea4fc9f HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:02 UTC	497	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 786 Connection: close Access-Control-Allow-Origin: https://observalgerie.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 13 Mar 2025 11:23:01 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 cfbb6e543d97587a32117dbabb25fc86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: xT97nlX7eFH0qJXr-tGFTKTz9I3CrOf6f4orN0GtCkXt7Ro6ixzAdQ==
2025-03-13 11:23:02 UTC	786	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 69 66 20 28 21 77 69 6e 64 6f 77 2e 50 75 62 6c 69 73 68 65 72 43 6f 6d 6d 6f 6e 49 64 29 20 7b 5c 6e 20 20 20 20 76 61 72 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5c 6e 20 20 20 20 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 2e 73 72 63 20 3d 20 27 2f 2f 73 65 63 75 72 65 2e 63 64 6e 2e 66 61 73 74 63 6c 69 63 6b 2e 6e 65 74 2f 6a 73 2f 70 75 62 63 69 64 2f 6c 61 74 65 73 74 2f 70 75 62 63 69 64 2e 6d 69 6e 2e 6a 73 27 3b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 75 62 63 6f 6d 6d 6f 6e 53 63 72 69 70 74 29 3b 5c 6e 7d 3b 76 61 72 20 69 64 35 50 Data Ascii: {"3pvendor":"if (!window.PublisherCommonId) {\n var pubcommonScript = document.createElement('script');\n pubcommonScript.src = '//secure.cdn.fastclick.net/js/pubcid/latest/pubcid.min.js';\n document.head.appendChild(pubcommonScript);\n};var id5P

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:01 UTC	453	OUT	GET /g/v2/1.json HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: id5=5c66cd32-ab95-7c9b-99f0-555dfbe53970#1741864973231#2
2025-03-13 11:23:02 UTC	185	IN	HTTP/1.1 400 Bad Request date: Thu, 13 Mar 2025 11:23:01 GMT transfer-encoding: chunked strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2025-03-13 11:23:02 UTC	551	IN	Data Raw: 32 31 42 0d 0a 52 65 71 75 69 72 65 64 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 69 73 20 6d 69 73 73 69 6e 67 3a 20 70 75 62 6c 69 63 20 6f 72 67 2e 73 70 72 69 6e 67 66 72 61 6d 65 77 6f 72 6b 2e 68 74 74 70 2e 52 65 73 70 6f 6e 73 65 45 6e 74 69 74 79 3c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 73 70 6f 6e 73 65 44 74 6f 3e 20 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 46 65 74 63 68 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 65 74 63 68 43 6c 69 65 6e 74 54 6f 53 65 72 76 65 72 28 6a 61 76 61 2e 6c 61 6e 67 2e 4c 6f 6e 67 2c 69 6f 2e 69 64 35 2e 66 65 74 63 68 2e 72 65 71 75 65 73 74 2e 46 65 74 63 68 52 65 71 75 65 73 74 42 6f 64 79 2c 6a 61 76 61 2e 6c 61 6e 67 2e 49 6e 74 65 67 65 72 2c 6a 61 76 61 2e 6c 61 6e 67 2e Data Ascii: 21BRequired request body is missing: public org.springframework.http.ResponseEntity<io.id5.fetch.request.FetchResponseDto> io.id5.fetch.FetchController.fetchClientToServer(java.lang.Long,io.id5.fetch.request.FetchRequestBody,java.lang.Integer,java.lang.

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:01 UTC	587	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:02 UTC	705	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 13 Mar 2025 11:23:03 GMT Cache-Control: public, max-age=86400 ETag: "a4d296427fc806b21335359e398c025c" Vary: Origin X-Cache: RefreshHit from cloudfront Via: 1.1 b4bf06ec43f99543c974d975a6c597da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: ruAT6rbw9I93seu4zSrN35MZ4bQVJPQFBcgSDmSkJHOfImFovEilSw==
2025-03-13 11:23:02 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:02 UTC	1642	OUT	GET /watch/99162160?wmode=7&page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A0%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072257%3Aet%3A1741864978%3Ac%3A1%3Arn%3A688583309%3Arqn%3A1%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A8544%3Awv%3A2%3Ads%3A0%2C3515%2C656%2C199%2C3035%2C0%2C%2C893%2C3%2C%2C%2C%2C12535%3Aco%3A0%3Acpf%3A1%3Ans%3A1741864960117%3Arqnl%3A1%3Ast%3A1741864979%3At%3AObservAlg%C3%A9rie%20%3A%20Infos%20et%20news%20pour%20la%20diaspora%20alg%C3%A9rienne&t=gdpr(14)clc(0-0-0)rqnt(1 [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:02 UTC	3347	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://observalgerie.com Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Expires: Thu, 13-Mar-2025 11:23:02 GMT Last-Modified: Thu, 13-Mar-2025 11:23:02 GMT Location: /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A0%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072257%3Aet%3A1741864978%3Ac%3A1%3Arn%3A688583309%3Arqn%3A1%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A8544%3Awv%3A2%3Ads%3A0%2C3515%2C656%2C199%2C3035%2C0%2C%2C893%2C3%2C%2C%2C%2C12535%3Aco%3A0%3Acpf%3A1%3Ans%3A1741864960117%3Arqnl%3A1%3Ast%3A1741864979%3At%3AObservAlg%C3%A9rie%20%3A%20Infos%20et%20news%20pour%20la%20diaspora%20alg%C3%A9rienne&t=gdpr%2814%29clc% [TRUNCATED] Pragma: no-cache Set-Cookie: yabs-sid=1803512221741864982; Path=/; SameSite=None; Secure Set-Cookie: i=ydmTU25NCKpKResAV6A+2jwnZ4Ods1QaxMFhBAlof6Y/qtBPfkRDaz0BZBXmBBNn4Xd/qUAoaJj7E03ZzxfLOsuI8S4=; Expires=Sun, 11-Mar-2035 11:23:01 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6129829171741864982; Expires=Sun, 11-Mar-2035 11:23:01 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yuidss=6129829171741864982; Expires=Fri, 13-Mar-2026 11:23:02 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1773400982.yrts.1741864982#1773400982.yrtsi.1741864982; Expires=Fri, 13-Mar-2026 11:23:02 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Fri, 13-Mar-2026 11:23:02 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC4zNioCPzA6B1dpbmRvd3NCBjEwLjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC4zNiIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguMzYiYJaAy74G; Path=/; Domain=.yandex.com; Expires=Fri, 17 Apr 2026 11:23:02 GMT; SameSite=None; Secure Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCWgMu+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Fri, 17 Apr 2026 11:23:02 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-03-13 11:23:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:03 UTC	396	OUT	GET /events HTTP/1.1 Host: logs2.sportslocalmedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:04 UTC	167	IN	HTTP/1.1 405 Not Allowed Server: nginx Date: Thu, 13 Mar 2025 11:23:03 GMT Content-Type: text/html Content-Length: 552 Connection: close Allow: POST, OPTIONS
2025-03-13 11:23:04 UTC	552	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chr

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:04 UTC	647	OUT	GET /pagead/managed/js/gpt/m202503060101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CLbgygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:05 UTC	742	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 534044 X-XSS-Protection: 0 Date: Thu, 13 Mar 2025 01:44:34 GMT Expires: Fri, 13 Mar 2026 01:44:34 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 15882622433015097735 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 34711 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 11:23:05 UTC	636	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 4d 61 74 68 2e 75 75 69 64 2e 6a 73 20 28 76 31 2e 34 29 20 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 6d 61 69 6c 74 6f 3a 72 6f 62 65 72 74 40 62 72 6f 6f 66 61 2e 63 6f 6d 20 0a 43 6f Data Ascii: OUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. / / Math.uuid.js (v1.4) http://www.broofa.com mailto:robert@broofa.com Co
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 2c 63 6f 2c 6a 6f 2c 71 6f 2c 76 6f 2c 77 6f 2c 79 6f 2c 7a 6f 2c 45 6f 2c 46 6f 2c 48 6f 2c 68 6f 2c 69 6f 2c 51 6f 2c 53 6f 2c 55 6f 2c 56 6f 2c 57 6f 2c 58 6f 2c 24 6f 2c 64 70 2c 68 70 2c 75 70 2c 71 70 2c 42 70 2c 43 70 2c 44 70 2c 45 70 2c 76 70 2c 46 70 2c 77 70 2c 48 70 2c 4a 70 2c 4b 70 2c 4e 70 2c 4f 70 2c 51 70 2c 50 70 2c 54 70 2c 56 70 2c 57 70 2c 58 70 2c 59 70 2c 24 70 2c 61 71 2c 66 71 2c 67 71 2c 68 71 2c 6a 71 2c 6e 71 2c 6f 71 2c 73 71 2c 75 71 2c 76 71 2c 77 71 2c 78 71 2c 7a 71 2c 41 71 2c 44 71 2c 57 71 2c 59 71 2c 5a 71 2c 24 71 2c 64 72 2c 65 72 2c 68 72 2c 56 71 2c 42 71 2c 43 71 2c 69 72 2c 6a 72 2c 6c 72 2c 6d 72 2c 6e 72 2c 6f 72 2c 71 72 2c 72 72 2c 78 72 2c 7a 72 2c 41 72 2c 42 72 2c 45 72 2c 46 72 2c 49 72 2c 48 72 2c 4d 72 Data Ascii: ,co,jo,qo,vo,wo,yo,zo,Eo,Fo,Ho,ho,io,Qo,So,Uo,Vo,Wo,Xo,$o,dp,hp,up,qp,Bp,Cp,Dp,Ep,vp,Fp,wp,Hp,Jp,Kp,Np,Op,Qp,Pp,Tp,Vp,Wp,Xp,Yp,$p,aq,fq,gq,hq,jq,nq,oq,sq,uq,vq,wq,xq,zq,Aq,Dq,Wq,Yq,Zq,$q,dr,er,hr,Vq,Bq,Cq,ir,jr,lr,mr,nr,or,qr,rr,xr,zr,Ar,Br,Er,Fr,Ir,Hr,Mr
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 61 3f 21 21 6b 61 26 26 6b 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 5f 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 61 28 22 46 69 72 65 66 6f 78 22 29 7c 7c 6d 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 70 61 28 29 7c 7c 28 6e 61 28 29 3f 30 3a 6d 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 6e 61 28 29 3f 30 3a 6d 61 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 6e 61 28 29 3f 30 3a 6d 61 28 22 45 64 67 65 22 29 29 7c 7c 28 6e 61 28 29 3f 6c 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 6d 61 28 22 45 64 67 2f 22 29 29 7c 7c 28 6e 61 28 Data Ascii: nction(){return ja?!!ka&&ka.brands.length>0:!1};_.oa=function(){return ma("Firefox")\|\|ma("FxiOS")};_.qa=function(){return ma("Safari")&&!(_.pa()\|\|(na()?0:ma("Coast"))\|\|(na()?0:ma("Opera"))\|\|(na()?0:ma("Edge"))\|\|(na()?la("Microsoft Edge"):ma("Edg/"))\|\|(na(
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 3a 64 2e 63 61 6c 6c 28 62 2c 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 3b 28 62 3d 63 3d 3d 6e 75 6c 6c 3f 22 22 3a 63 2e 6e 6f 6e 63 65 7c 7c 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 76 61 28 62 29 3b 4f 61 28 61 29 7d 3b 5f 2e 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 52 61 29 72 65 74 75 72 6e 20 61 2e 67 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 54 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 Data Ascii: :d.call(b,"script[nonce]");(b=c==null?"":c.nonce\|\|c.getAttribute("nonce")\|\|"")&&a.setAttribute("nonce",b)};Qa=function(a,b){a.src=_.va(b);Oa(a)};_.Sa=function(a){if(a instanceof _.Ra)return a.g;throw Error("");};Ua=function(a,b){b=_.Ta(a,b);var c;(c=b>=0)
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 68 62 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 57 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 Data Ascii: )for(var e=0;e<d.length;e+=8192)for(var f=hb.apply(null,Wa(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};ib=function(a,b){a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__98
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 61 74 65 22 29 3b 66 3d 36 35 35 33 33 7d 64 5b 63 2b 2b 5d 3d 66 3e 3e 31 32 7c 32 32 34 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 26 36 33 7c 31 32 38 7d 64 5b 63 2b 2b 5d 3d 66 26 36 33 7c 31 32 38 7d 7d 61 3d 63 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3f 64 3a 64 2e 73 75 62 61 72 72 61 79 28 30 2c 63 29 7d 72 65 74 75 72 6e 20 61 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 68 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 71 62 29 72 65 74 75 72 6e 20 72 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 Data Ascii: ate");f=65533}d[c++]=f>>12\|224;d[c++]=f>>6&63\|128}d[c++]=f&63\|128}}a=c===d.length?d:d.subarray(0,c)}return a};pb=function(a){_.ha.setTimeout(function(){throw a;},0)};sb=function(a){if(!qb)return rb(a);for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromC
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 7e 62 7d 3b 54 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 34 26 61 29 72 65 74 75 72 6e 20 32 30 34 38 26 61 3f 32 30 34 38 3a 34 30 39 36 26 61 3f 34 30 39 36 3a 30 7d 3b 55 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 51 62 28 61 2c 33 34 29 3b 72 65 74 75 72 6e 20 61 7d 3b 56 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 51 62 28 61 2c 33 32 29 3b 72 65 74 75 72 6e 20 61 7d 3b 57 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 42 69 67 49 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 3b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 59 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d Data Ascii: ~b};Tb=function(a){if(4&a)return 2048&a?2048:4096&a?4096:0};Ub=function(a){Qb(a,34);return a};Vb=function(a){Qb(a,32);return a};Wb=function(){return typeof BigInt==="function"};Xb=function(a){return Array.prototype.slice.call(a)};Yb=function(a){return a!=
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 6e 28 62 29 7b 69 66 28 21 75 63 28 62 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 3d 5f 2e 78 28 5f 2e 74 28 4f 62 6a 65 63 74 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 61 29 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 5f 2e 78 28 64 2e 76 61 6c 75 65 29 3b 64 3d 65 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 65 3d 65 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 69 66 28 21 28 64 20 69 6e 20 62 29 29 7b 69 66 28 65 2e 77 70 3d 3d 3d 21 30 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 21 31 7d 69 66 28 21 65 28 62 5b 64 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 29 7d 3b 78 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: n(b){if(!uc(b))return!1;for(var c=_.x(_.t(Object,"entries").call(Object,a)),d=c.next();!d.done;d=c.next()){var e=_.x(d.value);d=e.next().value;e=e.next().value;if(!(d in b)){if(e.wp===!0)continue;return!1}if(!e(b[d]))return!1}return!0})};xc=function(a){re
2025-03-13 11:23:05 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3e 3e 3e 3d 30 3b 61 3e 3e 3e 3d 30 3b 69 66 28 62 3c 3d 32 30 39 37 31 35 31 29 76 61 72 20 63 3d 22 22 2b 28 34 32 39 34 39 36 37 32 39 36 2a 62 2b 61 29 3b 65 6c 73 65 20 57 62 28 29 3f 63 3d 22 22 2b 28 42 69 67 49 6e 74 28 62 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 7c 42 69 67 49 6e 74 28 61 29 29 3a 28 63 3d 28 61 3e 3e 3e 32 34 7c 62 3c 3c 38 29 26 31 36 37 37 37 32 31 35 2c 62 3d 62 3e 3e 31 36 26 36 35 35 33 35 2c 61 3d 28 61 26 31 36 37 37 37 32 31 35 29 2b 63 2a 36 37 37 37 32 31 36 2b 62 2a 36 37 31 30 36 35 36 2c 63 2b 3d 62 2a 38 31 34 37 34 39 37 2c 62 2a 3d 32 2c 61 3e 3d 31 45 37 26 26 28 63 2b 3d 61 2f 31 45 37 3e 3e 3e 30 2c 61 25 3d 31 45 37 29 2c 63 3e 3d 31 45 37 26 26 28 62 2b 3d 63 2f 31 45 37 Data Ascii: nction(a,b){b>>>=0;a>>>=0;if(b<=2097151)var c=""+(4294967296b+a);else Wb()?c=""+(BigInt(b)<<BigInt(32)\|BigInt(a)):(c=(a>>>24\|b<<8)&16777215,b=b>>16&65535,a=(a&16777215)+c6777216+b6710656,c+=b8147497,b*=2,a>=1E7&&(c+=a/1E7>>>0,a%=1E7),c>=1E7&&(b+=c/1E7

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:04 UTC	2136	OUT	GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fobservalgerie.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1621%3Acn%3A1%3Adp%3A0%3Als%3A1191492401378%3Ahid%3A74551681%3Az%3A-240%3Ai%3A20250313072257%3Aet%3A1741864978%3Ac%3A1%3Arn%3A688583309%3Arqn%3A1%3Au%3A1741864978186511572%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A8544%3Awv%3A2%3Ads%3A0%2C3515%2C656%2C199%2C3035%2C0%2C%2C893%2C3%2C%2C%2C%2C12535%3Aco%3A0%3Acpf%3A1%3Ans%3A1741864960117%3Arqnl%3A1%3Ast%3A1741864979%3At%3AObservAlg%C3%A9rie%20%3A%20Infos%20et%20news%20pour%20la%20diaspora%20alg%C3%A9rienne&t=gdpr%2814%29clc%280-0- [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://observalgerie.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=1803512221741864982; i=ydmTU25NCKpKResAV6A+2jwnZ4Ods1QaxMFhBAlof6Y/qtBPfkRDaz0BZBXmBBNn4Xd/qUAoaJj7E03ZzxfLOsuI8S4=; yandexuid=6129829171741864982; yuidss=6129829171741864982; ymex=1773400982.yrts.1741864982#1773400982.yrtsi.1741864982; receive-cookie-deprecation=1; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCWgMu+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
2025-03-13 11:23:05 UTC	779	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://observalgerie.com Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 611 Content-Type: application/json; charset=utf-8 Expires: Thu, 13-Mar-2025 11:23:05 GMT Last-Modified: Thu, 13-Mar-2025 11:23:05 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2025-03-13 11:23:05 UTC	611	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 31 32 2d 32 32 20 30 31 3a 32 38 3a 32 35 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 5a 51 75 54 54 63 2f 57 48 51 46 4e 74 42 37 79 68 37 4b 53 38 30 79 78 78 44 52 49 2b 47 66 77 45 69 58 4d 39 78 52 33 77 6a 4e 51 62 7a 52 76 46 4c 44 43 79 73 74 49 6b 4f 4e 4f 69 55 41 45 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"1","webvisor":{"arch_type":"none","date":"2024-12-22 01:28:25","forms":1,"recp":"1.00000"},"sbp": {"a":"ZQuTTc/WHQFNtB7yh7KS80yxxDRI+GfwEiXM9xR3wjNQbzRvFLDCystIkONOiUAE"

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:04 UTC	693	OUT	GET /sync_cookie_image_check?scid=08dcedb4-fb35-9606-6002-73bab6f393f8&cid=99162160 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:05 UTC	813	IN	HTTP/1.1 302 Moved temporarily Connection: Close Location: https://mc.yandex.ru/sync_cookie_image_start?cid=99162160&redirect_domain=mc.yandex.com&scid=08dcedb4-fb35-9606-6002-73bab6f393f8&token=10611.8Tqek0UB2z1gnzQl5IPGq9C6I5JCCZUaO7MnIqzV4mdflJqHfjq5MUvXGYtE_Ikw.uEhXv3HGPco8YJnrJfMWDXxdWeQ%2C Set-Cookie: sync_cookie_csrf=4111958118fake; Expires=Thu, 13-Mar-2025 11:33:05 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCZgMu+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Fri, 17 Apr 2026 11:23:05 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-03-13 11:23:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:04 UTC	633	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:05 UTC	1416	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Thu, 13 Mar 2025 11:23:05 GMT ETag: "67c955dd-2b" Expires: Thu, 13 Mar 2025 12:23:05 GMT Last-Modified: Thu, 06 Mar 2025 07:59:25 GMT Set-Cookie: i=XDzqflwrPnxCVjUy3T8XojoAZyNkjN3JPNmb5GXPkPmNq2N/JfSUk3g2e/C5qL+Suxqxd/rglslIl7pl/oC7bsxxsjs=; Expires=Sat, 13-Mar-2027 11:23:05 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6165867591741864985; Expires=Sat, 13-Mar-2027 11:23:05 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=6648146181741864985; Path=/; Domain=.yandex.com; Expires=Fri, 13 Mar 2026 11:23:05 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCZgMu+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Fri, 17 Apr 2026 11:23:05 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-13 11:23:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-13 11:23:08 UTC	707	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CLbgygE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://observalgerie.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 11:23:09 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 13 Mar 2025 06:58:21 GMT Expires: Fri, 14 Mar 2025 06:58:21 GMT Cache-Control: public, max-age=86400 Age: 15888 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 11:23:09 UTC	632	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2025-03-13 11:23:09 UTC	446	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: