Edit tour

Windows Analysis Report
https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html

Overview

General Information

Sample URL:	https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html
Analysis ID:	1641802
Infos:

Detection

Score:	4
Range:	0 - 100
Confidence:	100%

Signatures

Connects to several IPs in different countries

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

HTML page contains hidden javascript code

HTML page contains string obfuscation

Yara detected Keylogger Generic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3712754414397003611,18260932764131230844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_287	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• Key, Mouse, Clipboard, Microphone and Screen Capturing
• System Summary
• Persistence and Installation Behavior

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html

HTTP Parser: Base64 decoded: ai=CtISnwmvZZ4GWLMyXjuwPlarw0A7LxPXHfPre5rLZE5Cd13kQASCH34oCYMkGoAGNlZ_zKsgBAqkCeutqFJLKSD6oAwHIA8kEqgT2AU_QIUtwkZOqJR7FTfo-C5tcZjr2vv2F7UVLa6_vdbNcObWQeT4nidH9y-ga7RuvzVBUk5SgtXerctAf4FdecFiQN6q1E4y6Eca-dnHxB2bIW9GT3OCOX6YR29tbxlF127fKQown9kUSecGrukP2t7p...

Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=90&slotname=9020540477&adk=3662550234&adf=1705154534&pi=t.ma~as.9020540477&w=728&abgtt=6&lmt=1742302145&format=728x90&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144000&bpp=2&bdt=3678&idt=1611&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=308&ady=64&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7CaeE%7C&abl=CA&pfx=0&fu=0&bc...

HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-DfI3s12tqmn6_TDcTMlaLeYEBptYD6qgWuhAbabL_yxXElfd7ySQIWrW7M36C6fflGvoNtnH-kF9e5kHMaFgOz31bCiyDpgQ_3BgK4vjZRCO4zlmGZq2CV5rg5Q3rdFG5RRFArb-CC03ZEVHFqv5asiZvx5KkIJm_6FNUJxwdWuFaHDLsns7DFZYlLe6g9gFg14gB9mA7MXc3ueJZnXyd2yQ3Ov5HsXVMiwHF3U7mZfFwfCHA&cry=1&dbm_d=AKAmf-DeI0Yd6t-yIYYdjiiPTvUooXRaou5Wbvg5BlJYTFv7ghaX9P6roCcCqdUl1paB090D6j2G2CzN6GTocPRD9QU1gy00LtWrKXLdlW6Cg77eyzeaiS9Tu5rkBciRsrmjsApmHnkFXz1dWia_ei49RV6jOYG7gqy6WOoYMjThQNgJA5hJl5jgRi3z0zc-XaQIJDO9sr6m6mTLVPMhVpZo_0Wek_l9WTDqec1UTsJyXOOjw60WJg377vFAcxtmhykhw19RlPUaFb7cenYL1BMSFbdNeGZsNiCRAj8oK9GV6si6m4Yn52W6QdcV3j--zOJrQfAt-3yxoFhzsBLp6RwUkCPgbDrd6hGuUKAYdFky8XWORfvh3elCtp1t1xW7vhQIgGH5uYypFEb3S7XPn0Gu18GtiwmIoyxBaMJc3uST45Jjd3OJLk6Y3Xj3pThwI3r4fpUCGVnTrUn1M299kLUBHFV6oCGXTKq5thBbPmHv7xUMwnuFuOi3BxP0Bq3eLMAFDqoFBL9pBBnjlYeMvr-nuxn8gjD5qMdoNJGx7FJ6zrfyO3QMoeyY2a964WfJ5xoOiL8u5-vZZcBifnaOAYddPrM8hWGJ1CaGYJnEEv5evBdtn8JGmNWDNLVFSzPXZrJYBK-06rwpBPMKGAl2EUKurzGuzURDA6_R1l1lWxHNmSU7GQaWg...

Source: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	HTTP Parser: No favicon
Source: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	HTTP Parser: No favicon
Source: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	HTTP Parser: No favicon
Source: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/home/upload	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.248:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.248:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.10.141:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.10.141:443 -> 192.168.2.17:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.112.27:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.199:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.15:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.160.150.14:443 -> 192.168.2.17:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.252:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.156:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.156:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.199:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.249:443 -> 192.168.2.17:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.249:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.2:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.97:443 -> 192.168.2.17:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.161:443 -> 192.168.2.17:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.14:443 -> 192.168.2.17:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.171.149:443 -> 192.168.2.17:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.226:443 -> 192.168.2.17:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.14:443 -> 192.168.2.17:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.0.66:443 -> 192.168.2.17:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 107.178.251.134:443 -> 192.168.2.17:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.168.80:443 -> 192.168.2.17:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.9.254:443 -> 192.168.2.17:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.209.174.12:443 -> 192.168.2.17:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.184.8.90:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.207.16.201:443 -> 192.168.2.17:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.82.210.217:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.85.52:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 82.145.213.8:443 -> 192.168.2.17:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.84.221:443 -> 192.168.2.17:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.109.14.96:443 -> 192.168.2.17:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.17:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.20.187:443 -> 192.168.2.17:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.37.193:443 -> 192.168.2.17:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.105.8:443 -> 192.168.2.17:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.193.173:443 -> 192.168.2.17:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.200:443 -> 192.168.2.17:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.84.221:443 -> 192.168.2.17:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.139.139:443 -> 192.168.2.17:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.17:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.147.9:443 -> 192.168.2.17:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.102:443 -> 192.168.2.17:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.17:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.171.149:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.17:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.150:443 -> 192.168.2.17:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.150:443 -> 192.168.2.17:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.17:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.17:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.17:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.17:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.110:443 -> 192.168.2.17:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.99:443 -> 192.168.2.17:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.17:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.99:443 -> 192.168.2.17:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.142:443 -> 192.168.2.17:50170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.116.94:443 -> 192.168.2.17:54820 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 16MB later: 42MB

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50169 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:50168 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mg/getmirror/gs_auto_clicker,1.html HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?ct=core&action=css&id=2 HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /core/javaload/jquery.js HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /www/delivery/spcjs.php?id=1&target=_blank HTTP/1.1Host: ra.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logos/majorgeeks.gif HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /images/click_here.gif HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /www/delivery/spc.php?zones=3%7C19%7C18%7C2%7C1%7C5%7C8%7C7%7C4%7C10%7C9%7C11%7C12%7C13%7C14%7C15%7C16%7C17&source=&r=62913553&target=_blank&charset=UTF-8&loc=https%3A//www.majorgeeks.com/mg/getmirror/gs_auto_clicker%2C1.html HTTP/1.1Host: ra.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OAGEO=2%7CUS%7CNA%7C%7CNew+York%7C10118%7C40.7126%7C-74.0066%7C20%7CAmerica%2FNew_York%7C501%7CNY%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C
Source: global traffic	HTTP traffic detected: GET /images/icons/red_icon_18x17px.png HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /images/click_here.gif HTTP/1.1Host: www.majorgeeks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /images/logos/majorgeeks.gif HTTP/1.1Host: www.majorgeeks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /b/advertisement.js HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-4Y94MPWMLL&gacid=2002398376.1742302142&gtm=45je53d3v9101948670za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719~102887799&z=1103085903 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-2P5P29X9CP&gacid=2002398376.1742302142&gtm=45je53d3v9101948670za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719~102887799&z=600235302 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embedcode/horizontal-slim-10_7.css HTTP/1.1Host: cdn-images.mailchimp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/red_icon_18x17px.png HTTP/1.1Host: www.majorgeeks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /1.0.0/button.prod.min.js HTTP/1.1Host: cdnjs.buymeacoffee.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mg/sub.png HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /button-api/?text=Buy%20a%20Geek%20a%20Coffee&emoji=%E2%98%95&slug=majorgeeks&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff HTTP/1.1Host: img.buymeacoffee.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?ct=core&action=tasks HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /js/sharethis.js HTTP/1.1Host: platform-api.sharethis.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api.js HTTP/1.1Host: api.majorgeeks.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /button-api/?text=Buy%20a%20Geek%20a%20Coffee&emoji=%E2%98%95&slug=majorgeeks&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff HTTP/1.1Host: img.buymeacoffee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mg/sub.png HTTP/1.1Host: www.majorgeeks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /index.php?ct=core&action=tasks HTTP/1.1Host: www.majorgeeks.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /index.php?ct=files&action=download& HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105; _pk_id.1.7dc6=bd0094548307588f.1742302144.; _pk_ses.1.7dc6=1
Source: global traffic	HTTP traffic detected: GET /index.php?ct=files&action=download& HTTP/1.1Host: www.majorgeeks.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vpsv8no9ap17fg9dfmsschsp2u; _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105; _pk_id.1.7dc6=bd0094548307588f.1742302144.; _pk_ses.1.7dc6=1
Source: global traffic	HTTP traffic detected: GET /9020c93f3d90d02ea7634cd5a4b16e525485a415/input/gs-auto-clicker.exe HTTP/1.1Host: files1.majorgeeks.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.2002398376.1742302142; _ga_4Y94MPWMLL=GS1.1.1742302141.1.0.1742302141.60.0.837158340; _ga_2P5P29X9CP=GS1.1.1742302141.1.0.1742302142.59.0.1727323105
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20250305/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6960825562757852&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1742302145&plaf=1%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiapmi=0.33938&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302143993&bpp=7&bdt=3672&idt=1578&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6585071279416&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=1&uci=a!1&fsb=1&dtd=1608 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6960825562757852&output=html&h=90&slotname=9020540477&adk=3662550234&adf=1705154534&pi=t.ma~as.9020540477&w=728&abgtt=6&lmt=1742302145&format=728x90&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144000&bpp=2&bdt=3678&idt=1611&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=308&ady=64&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7CaeE%7C&abl=CA&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=2&uci=a!2&fsb=1&dtd=1617 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6960825562757852&output=html&h=280&slotname=9293800031&adk=2344477007&adf=1796376380&pi=t.ma~as.9293800031&w=952&abgtt=6&fwrn=4&fwrnh=100&lmt=1742302145&rafmt=1&format=952x280&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144002&bpp=9&bdt=3680&idt=1625&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=156&ady=414&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=d%7C%7CoeE%7Cp&abl=XS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=3&uci=a!3&fsb=1&dtd=1629 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Sec-Browsing-Topics: ();p=P0000000000000000000000000000000Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20250305&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CJfnugEQw7j0ARjKmdOzAjAB&v=APEucNUHfz8VWJydzYg7a55fEH5V169gffGJtzPtNCrIoj-Q87Y74VA_AEDAv9nRI0f5rantTLDODQVqC3IoQgzHK9_FZiW1qQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=90&slotname=9020540477&adk=3662550234&adf=1705154534&pi=t.ma~as.9020540477&w=728&abgtt=6&lmt=1742302145&format=728x90&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144000&bpp=2&bdt=3678&idt=1611&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=308&ady=64&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7CaeE%7C&abl=CA&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=2&uci=a!2&fsb=1&dtd=1617Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlVYK-ovma-smX-M32TkLkr0Tw8GLfs_jpq8t23AuZvghc-ev06SbBofFCndHw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CSKwMwmvZZ6qbN5iPjuwP6pv7mAu9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTY5NjA4MjU1NjI3NTc4NTLIAQmoAwHIAwKqBOkBT9Cenyn45_MlqHbMrxQ7JrlLF2qovhmZCCLFNftkmxJ1FAMvMx9qRI1d7NucyuCtfN-PrtaHv5zp1_c8MRtkK_kETkdCgU1ol6Z2PMEc8KQ8djhct-Ck8QsqrcpzzIxUgLYVmFXgiw0PORTlC0-TYsBT_il3GjALNSJhwuw6Zg7c4p55hmSKpQndwX29kVXzTAQoAuUSHhKnMwyhpXCssNhNuwK3alApZ1E57wyWp7LDX28FkL42kSXMp6BhxXc1ZBu8FnyAV6S4xhZ9kHvvFLhecum7CGWe_AdxEfPk1kjO9fFcg6ckJxGABtWArMWQkI7-owGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WK_luqTVk4wDgAoB-gsCCAGADAHqDRMI3Pv8pNWTjAMVmIeDBx3qzR6z0BUBgBcBshccChgSFHB1Yi02OTYwODI1NTYyNzU3ODUyGAAYDA&sigh=-qONP5ktA48&uach_m=%5BUACH%5D&cid=CAQSPACjtLzMgkqqmaQDV7UFxtZ9Fl3Imx8mmzBZeAkoi1RR2XQRArxuw9G2ON0Q_0uie3vJ4zAv5ay9W6I1-hgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=280&slotname=9293800031&adk=2344477007&adf=1796376380&pi=t.ma~as.9293800031&w=952&abgtt=6&fwrn=4&fwrnh=100&lmt=1742302145&rafmt=1&format=952x280&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144002&bpp=9&bdt=3680&idt=1625&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=156&ady=414&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=d%7C%7CoeE%7Cp&abl=XS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=3&uci=a!3&fsb=1&dtd=1629Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveOrigin: https://googleads.g.doubleclick.netsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaR7WuDneXX8-f5FCKNNn9vmqRtkjh31gzEgHC3vefIfRic2XDpRsewirG_sVopyxFPY3Sx30Rgrs2KY6at1ALpJ4uHp9Q HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-35ea2358.css HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-53f673b4.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveOrigin: https://googleads.g.doubleclick.netsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_chat_copilot&d=www.majorgeeks.com&gid=&im=OsKq1kh-CrjELCjXCTDIk0wqc9l7fOfP0H8jTreJpU-0tMbq1WdIdDNhbtRE-q_OYsyJ-E5c818zC0ruMSenH8gOP0r9-JQoVrRbhVW86200sryB_p8ruWKWjbuSilyCMb6oOcRSlOFjQzka1hkZ6phz7OsTv8dGMQcpB0qO25LvUywx_m9PfaS-ttkdD1YQKHOo1zHsSXm4LKyi_GALAQat6AMDUQaYYcVwGmbSvi7iN4aKG3iYB6pEa3meiOpawRQep5nuZcGSpUAXwrYyObzwaUn_0MNuf_3VVhMNoek8pGoodLuxwIdaSWBkIwTWVM5PvF1XUQiBebgPJrY1LaRVA7SExuBy31L8kkv0R2V3BrgFbQy-8fSUM1NNOnBQ2iPLbLQKpr56LMAyRNLEoMQUTFlAXn17OgSLFRRA8xOx9sbhTnErm0WPNIxMgEke&p=Z9lrwgANzaoHg4eYAB7N6gOdHEbn3CwhB6nZYQ&sid=61306a18-03f7-11f0-8e2a-cac7be3d5fc6 HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=61306a18-03f7-11f0-8e2a-cac7be3d5fc6&params=OsKq1kh-CrjELCjXCTDIk0wqc9l7fOfP0H8jTreJpU-0tMbq1WdIdDNhbtRE-q_OYsyJ-E5c818zC0ruMSenH8gOP0r9-JQoVrRbhVW86200sryB_p8ruWKWjbuSilyCMb6oOcRSlOFjQzka1hkZ6phz7OsTv8dGMQcpB0qO25LvUywx_m9PfaS-ttkdD1YQKHOo1zHsSXm4LKyi_GALAQat6AMDUQaYYcVwGmbSvi7iN4aKG3iYB6pEa3meiOpawRQep5nuZcGSpUAXwrYyObzwaUn_0MNuf_3VVhMNoek8pGoodLuxwIdaSWBkIwTWVM5PvF1XUQiBebgPJrY1LaRVA7SExuBy31L8kkv0R2V3BrgFbQy-8fSUM1NNOnBQ2iPLbLQKpr56LMAyRNLEoMQUTFlAXn17OgSLFRRA8xOx9sbhTnErm0WPNIxMgEke HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQ1BjAraR3W3an6Wy9cSv84PVzwZnpe4GRmdO_0ovhovvBpiXmp_PU4NO5vTkU7RXF_zfA6BaHAlPRHzPjsvXGULtcnYw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-6960825562757852?href=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vir&oit=1&cp=3&pgcl=4&gs_rn=42&psi=RiE6LnTRE6htll8-&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=4&gs_rn=42&psi=RiE6LnTRE6htll8-&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CSKwMwmvZZ6qbN5iPjuwP6pv7mAu9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTY5NjA4MjU1NjI3NTc4NTLIAQmoAwHIAwKqBOkBT9Cenyn45_MlqHbMrxQ7JrlLF2qovhmZCCLFNftkmxJ1FAMvMx9qRI1d7NucyuCtfN-PrtaHv5zp1_c8MRtkK_kETkdCgU1ol6Z2PMEc8KQ8djhct-Ck8QsqrcpzzIxUgLYVmFXgiw0PORTlC0-TYsBT_il3GjALNSJhwuw6Zg7c4p55hmSKpQndwX29kVXzTAQoAuUSHhKnMwyhpXCssNhNuwK3alApZ1E57wyWp7LDX28FkL42kSXMp6BhxXc1ZBu8FnyAV6S4xhZ9kHvvFLhecum7CGWe_AdxEfPk1kjO9fFcg6ckJxGABtWArMWQkI7-owGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WK_luqTVk4wDgAoB-gsCCAGADAHqDRMI3Pv8pNWTjAMVmIeDBx3qzR6z0BUBgBcBshccChgSFHB1Yi02OTYwODI1NTYyNzU3ODUyGAAYDA&sigh=-qONP5ktA48&uach_m=%5BUACH%5D&cid=CAQSPACjtLzMgkqqmaQDV7UFxtZ9Fl3Imx8mmzBZeAkoi1RR2XQRArxuw9G2ON0Q_0uie3vJ4zAv5ay9W6I1-hgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /ext/aifromchrome_1723036034.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-DfI3s12tqmn6_TDcTMlaLeYEBptYD6qgWuhAbabL_yxXElfd7ySQIWrW7M36C6fflGvoNtnH-kF9e5kHMaFgOz31bCiyDpgQ_3BgK4vjZRCO4zlmGZq2CV5rg5Q3rdFG5RRFArb-CC03ZEVHFqv5asiZvx5KkIJm_6FNUJxwdWuFaHDLsns7DFZYlLe6g9gFg14gB9mA7MXc3ueJZnXyd2yQ3Ov5HsXVMiwHF3U7mZfFwfCHA&cry=1&dbm_d=AKAmf-DeI0Yd6t-yIYYdjiiPTvUooXRaou5Wbvg5BlJYTFv7ghaX9P6roCcCqdUl1paB090D6j2G2CzN6GTocPRD9QU1gy00LtWrKXLdlW6Cg77eyzeaiS9Tu5rkBciRsrmjsApmHnkFXz1dWia_ei49RV6jOYG7gqy6WOoYMjThQNgJA5hJl5jgRi3z0zc-XaQIJDO9sr6m6mTLVPMhVpZo_0Wek_l9WTDqec1UTsJyXOOjw60WJg377vFAcxtmhykhw19RlPUaFb7cenYL1BMSFbdNeGZsNiCRAj8oK9GV6si6m4Yn52W6QdcV3j--zOJrQfAt-3yxoFhzsBLp6RwUkCPgbDrd6hGuUKAYdFky8XWORfvh3elCtp1t1xW7vhQIgGH5uYypFEb3S7XPn0Gu18GtiwmIoyxBaMJc3uST45Jjd3OJLk6Y3Xj3pThwI3r4fpUCGVnTrUn1M299kLUBHFV6oCGXTKq5thBbPmHv7xUMwnuFuOi3BxP0Bq3eLMAFDqoFBL9pBBnjlYeMvr-nuxn8gjD5qMdoNJGx7FJ6zrfyO3QMoeyY2a964WfJ5xoOiL8u5-vZZcBifnaOAYddPrM8hWGJ1CaGYJnEEv5evBdtn8JGmNWDNLVFSzPXZrJYBK-06rwpBPMKGAl2EUKurzGuzURDA6_R1l1lWxHNmSU7GQaWgus7hafn78dm2zFjoostFg6_4xk4OW2p1qchNZQPnMucwTUm73lWa--MWvELrM7VoqUR7Ij22tgLIv2WtgOEsQbxhAyH7-czNXh2wz2DgXY8gZ6jicoXsPGGCQA4fedlXm3H3qWZIORPRVue-qYrPUOg7J5FFtAuL_SCPaiBADDgv44u9YajgpzsnXE1NrQvCpbxq20j4IbLoLuSNwCeX_-ZvtC48Bfa3fHOmdQw2qFeSY2pbkSPwLcMThvcIG9wRXKC8Z2H7R6vAYkmS4yOkyJ-1x3RyvdvV7TGwjJlZYOJfxrF9P81loKKKBJKAU591rS-wSNc8XMyLf9580GZgFXv4xR7bd7aVZtVqiv9Q8ijaGLwX_XflX0uG5BfiQIB3Q1MeLtJ1hNuBkTltu1n70UnPV083yyn-jVFaaw_vTnQm0_je3qH6hxR5ge-LTlFl71vO_i4ULiTa4fUIsxs1Olu6JVRq3FhAJ0L0E2JQUoDwUKitSrxr2acAfevf030T8N4ncddbjc0NGaLv_vZM73II9JmEhlpeXFK7x0fcly3UYraw5YR0fn1rIA9se1KgkkR861ngNcl4jCzcT2rLPD-oldzneWu7bhG5PebIL55vXOjMxwCIk-0LNj4wNRj6sf2s49qeA-gU-_mpBkCMNwCGJP0jHI40DKhYPX1STix_ZliegMQSY1AplgxdrK8spppfXjxH6IWvDhMgMsSwe6gc1U5uimiUr0JXIbB-vm4UseAWZLFwDRCp-CpCkjk1jmYMXlcAkU-DqgghzJSm51GeVVL-FfKJiojy5ycBybwhCciBwZ432YytxepXavi5McdcTe5SfCnkVwCDrgtGEejDds620th7XtRjc9iCHFslM3aq9h4NOdQx38jiOomz6YT-RQRvb4cXEmyEtghwh1AMWNaiagVYdtwyM9LiLA_i_q_PDpI28mKpwYO47N_1f2FbXj-lO2Om9plPt6Vc7B7sYi4HkZ89zm-qHXxFnRFOmrr86fE65MUjIupXf65v-YDJQxd2a610pEj9sgb4X2CvN74Lbfpul20_N3qPQ4Cx0HTjiT-dBXVt8hy_pkMouXGGmvL6Ggz78P1silaEDpZ-aKa8okUpmvPFlTVhkvXVCDOSR3rioYY5ijwTNsrqtCS9mvUsYZUeaS9HbbSoe00H1Mew4MLhRoX5ieIs5By3N2U321mw5hpIUB3PkWMBaDFRGjlna7GiPavWKCdi9x0Lc5npt2aXKayIl6RJujSHnEvO233Bp9q0klsV2WZUbTYEUFpmxj8NvcRYYTPpGjMgAVaZ5NOmsveM2DejwtfhFnCrmmVy7TMqrx3f0NtXu7rU84-0tBPi7TrnMzRceqy6l91NAkFHmzISLOhMSIYQkpSB39edS4psWaAjpaDWe0jOcFUK8flWyM8nn5R6M7mYK4B6xmZHFMVYkF8fjA-Un4CUZVYJPn-1LTelvZkYeWUHa6sPQSUqAlrNsdhF2oFdKfM6rkw6i0xW0djnOObDyLkMI4pOU81AiXhBnM2EnQQAnRia54O1u-Uf5ArWBkx_0WrVhFlw8GSrv8wwLofxAHy-5xVcBDTM1LrDyQEHrkHyCfd-gWIQN42n-bxMhMPEOzilDrCRbbRM2-CqGdj_07MuoMkN1Okz-HEybFqYhNSE5Cap0oyb8YEKnTcqClxtbL8IWurgGl7-rSiuu0gMdFBgB5tc7PUSCz-U7IB6SCgQ5RNpWvy7cvmXBtqlAmsiX6XbasUvBIfDSl4nvN3V8AKv_WVdpeJw6tU97TnxWHhwsMfFDhbYn-ZSv9J1OIGbP-c1TemfkY7nvJ0krSwTKTnOOs2Abx102TzbKdN0IeLCcXkL7gY5UEyd4NyRZOQCrCiXs9kcr8ZsJ1KJbNQnthMwNDMp5GDsQEmTp_Xzu9xE0JN123WhXHgnWSzNUDIHZ1k3nxh3oMt8Rdd7cqdkUBn5eiaxI1BcIZPfSL0dAMSgaX1MXv0PMd5Dy8ULNuz0h_hPhlkRgUuMyS5dc8a_n
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9lrxdHM6S8ALV6kAHuYuwAA; CMPS=3475; CMPRO=3475
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveOrigin: https://googleads.g.doubleclick.netsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoBold.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveOrigin: https://googleads.g.doubleclick.netsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9lrxdHM6S8ALV6kAHuYuwAA; CMPS=3475; CMPRO=3475
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUt2Ox4WgE19yFt4BgLt6AkaweM_j2iR3mHcSY6izswS8pMAtK_ngfdyX3kWQ8mjn3Vq6dJhrEH5wNCguMztxu6DDIbBBKH82Vfw6W1tB3y_AxOx41HOl_hQwmq1yuOQztxAucnfg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzQyMzAyMTQ5LDU2MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cubWFqb3JnZWVrcy5jb20vbWcvZ2V0bWlycm9yL2dzX2F1dG9fY2xpY2tlciwxLmh0bWwiLG51bGwsW1s4LCIza3g0N2R0U1hqWSJdLFs5LCJlbi1VUyJdLFsyMywiMTc0MjMwMjE0NiJdLFsxOSwiMiJdLFsyNCwiIl0sWzI5LCJmYWxzZSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pm?google_gid=CAESEP8WIY6gcbDYCokDKSIkhcQ&google_cver=1&google_push=AXcoOmSpwtwrJkiJTF1S-XU2S0LyQltnRzYCZnhnwkiok9VJ_5rkgwdl4vT22BOWrfrzGSVlFR_uh8ybLiwdjleO9EWUsA5YS4PveZ3d HTTP/1.1Host: tr-us.adsmoloco.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google_pixel?google_gid=CAESEKJXM0Z9gKDy7XrzMooDiKw&google_cver=1&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?partner=googleadxdb&google_gid=CAESEEleFwSYldNTQLt9TZ9Wy6E&google_cver=1&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESELAC2Qrha1sedlUCDr56eow&google_cver=1&google_push=AXcoOmRxer951VS2yYI9e8kTizhIr3UHkiXbjvAbAB5_BfqR6a-qU-pLPQYbi6i50PvpOP2b4eIHJNAPjAK6tQlxBBwX4Cg7x_5TFPu1FQ HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z9lrxdHM6S8ALV6kAHuYuwAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /match/?int_id=19&redir=1&google_gid=CAESENmhBnY01vnW45nHLnLuhcE&google_cver=1&google_push=AXcoOmS3Nid9VBs-ylU03CO5Sf3Yx8TOXrXG_WgnSCMrWLkcHjALcYHQDxO5mk_No9fj_peR1C8-XRZ2uV2cE_E6AdnMd3WrzXt2c_c HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEL3k9Mnyp61qL16FEes2VLk&google_cver=1&google_push=AXcoOmQnDfz9ywAbJucVOGYSDF65zrz4bgt3YsUzAhb77XJY5XlL4_4qdRLxuycT1AJQ-D1Tu4ocH_y--UCnZ5hj3l66XFB9Tr5ONM8 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEJTRQrI647_u5KtoBEe9QNw&google_cver=1&google_push=AXcoOmTOGBEX3m8xUGKWwSGUT6KCSgpj0_xihTnq6F2-jlVMxkdTRSbeBequ52239b7tPl8AzKuredGbcBPs8vx1GB48eHod3isa2iKi HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV HTTP/1.1Host: dclk-match.dotomi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRDv9UXn3V8cC5tR4Wo2P_pABCxGnJwTxZHjEj3bIFI8CAw7ocGCK2m2BKbTqHZSZeng-5Jyt6wf-BgvWW1Z8zCqjK-SA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13JSgRhWKJuiYnroq9EpCZ1UJl4ao7eq82DeDo6Ip7U76H29VLP4U3EhafUKf_MDqACUgz5nIw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /um?ssb_provider_id=3&uid=&google_nid=teadstv_ab&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_ab%26google_hm%3D%5BVID_B64%5D&google_gid=CAESEJU7RBGoOYIGXWf5BRbHmVk&google_cver=1&google_push=AXcoOmSROXRGRlUtsbfh6XtARZDgbJFmPZbnfbE3byWtY8t0r-htkn9jXsytp0zHOHQQjU8cfmTJabb4VsZzM4zaYL9JslG6O4wmE8hD HTTP/1.1Host: sync.teads.tvConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ssp=2&google_gid=CAESEJp76hMseJULimF0zYC7F1I&google_cver=1&google_push=AXcoOmSJHfYBYeX9q-pMRuHNOTC9sWsfU_yHLDvz-sl0pztZZyTzT-K5qpJbJILvfdpxUQINg-FWpWj7O6o9QXzHftpLR88FYYC5yTQT HTTP/1.1Host: dsp-cookie.adfarm1.adition.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /ext/aifromchrome_1723036034.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sid_cross=61306a18-03f7-11f0-8e2a-cac7be3d5fc6; uid_cross=62649f98-03f7-11f0-8f35-ce4495c99256
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBMYisu9Nym27TOLTNNGbtg&google_cver=1&google_push=AXcoOmTh8pkrnDC17fwLEiG6Rjx2JVCrrFxN6v047V8Uq4xdxPXWygY-yCXNWXAmAl6WdQiGsIx-oDRi952A_41EotubGFa0zue1o6yZ HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub6871767557696&google_push=AXcoOmTcLeeqO1xAewyDG9IDyaBb76fbMwt4r2C0bwR_RgOBH0UD3ivDcWf36I7mnBUtrsSgKwaNoUANUvfd32rsbBF7GLL0GJCLOFvuQA&google_gid=CAESEHIM6RbgYAClzWAylSMb6eU&google_cver=1 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gcm?google_gid=CAESEPfbrmcu1VZeL1v_e22hJdQ&google_cver=1&google_push=AXcoOmRokodEbEBZCoZgT7KSwiVvQahtsiJ6HSrOEmuVnNhvksRIMRz29my3ArDj75cPNuXPv8NTns-sm4Kqn-8-YOZs_8t2q9aeaGiF HTTP/1.1Host: a.c.appier.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/google?google_gid=CAESEFMKTKf4kh-UWb-owGvJjg0&google_cver=1&google_push=AXcoOmRiDTfiVpvnJzBbTB13pleWxWC6lOO-IXOL0Psp2Lq8TRbprzdb0qPF6Pg9ua6hzHYSk_ufY9EpDgTPomsAhi7fQSIskEUiWAF6Aw HTTP/1.1Host: sync.gonet-ads.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13Jl2_Hcs5HTnj4cEl6KmOEIoIp0QdpQMmyAmSIbNbvRbZIqYEdc5lTH9YPqgo8FL-e_no9fmCAR HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9lrxdHM6S8ALV6kAHuYuwAA; CMPS=3475; CMPRO=3475
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&code=CAESEH8R7osegs46rDbly8p3D1U&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imp/8/225407;9356677;201;jsappend;DV360;DV360FY24AcrobatDemandGenPSPDocTypeKeywordsTax2025USDSKBAN728x90/?ftOBA=1&ft_domain=www.majorgeeks.com&ft_ifb=1&ft_agentEnv=0&ft_referrer=https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html&us_privacy=${US_PRIVACY}&ft_partnerimpid=ABAjH0jYAqO1NcrQHG7kcMi65eO3&ft_custom=ABAjH0jYAqO1NcrQHG7kcMi65eO3&site_url=https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html&pub_id=1&sup_platform=1&cachebuster=946940.8633899406 HTTP/1.1Host: servedby.flashtalking.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEC_SsiKGsDy_LWAa_INoNnc&google_cver=1&google_push=AXcoOmTPdt7YB564eOhdO9sebmPAyDLNvpgs8Blp6y9bfLZb7plt90gz5mv-5yVUoNbJuYN2o9jnFkgiS82MVD5972_uKmYaE2c_lUQ HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b6&u=CAESEJLeP_PaCqwDhwiKFErpHEI&google_cver=1&google_push=AXcoOmStzWnb8JJvkyRmOgKlfgD3SDsEXGgEaV1h1OH9wIxKC1FQva9BGHtZ6hd20Et8wKhclUZJAIiYj7--ymFhG0YH7ziETZS-uTo&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmStzWnb8JJvkyRmOgKlfgD3SDsEXGgEaV1h1OH9wIxKC1FQva9BGHtZ6hd20Et8wKhclUZJAIiYj7--ymFhG0YH7ziETZS-uTo%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEJcm13gvXcU8Kmuv9VsoMx8&google_cver=1&google_push=AXcoOmS6emxDtWoTSVabYyubQd32PNiIj6_6pEVUSSl3V0twxXYCnS8znsq0fotwW2U43Iwp5NELm8yhrJTp7R9vqUXjgI65nme6qMY HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /int/cm?exc=1&acc=crimtan&google_gid=CAESEBtVX6nqH20-f2Wfnb6StS4&google_cver=1&google_push=AXcoOmQgsIsHl1eJQY9Iex0QLLY2dhSa3Guu9jUjLeuYa_iM7Ilun7rc01je3SDB9k0E6r_1O7u0A21L2NRQgwQmOOkl8FhPg4CRHA HTTP/1.1Host: gcm.ctnsnet.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=1QaVEwp7Qq8bM4bejR7CQw&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; APC=AfxxVi416UCJxPn0EC-tV2G_srkelm3Aoaot5bCHe0kTdLwoozk_Tw; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pixel/attr?d=AHNF13KRLIpEiFkHj7yZL62KvTqAnc4LkJNSu_XCJ1dgBSaAzYZjduldMsVkuennRV3_n789Q9HG HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; APC=AfxxVi416UCJxPn0EC-tV2G_srkelm3Aoaot5bCHe0kTdLwoozk_Tw; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=linkedin&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; APC=AfxxVi416UCJxPn0EC-tV2G_srkelm3Aoaot5bCHe0kTdLwoozk_Tw; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEJTRQrI647_u5KtoBEe9QNw&google_cver=1&google_push=AXcoOmTOGBEX3m8xUGKWwSGUT6KCSgpj0_xihTnq6F2-jlVMxkdTRSbeBequ52239b7tPl8AzKuredGbcBPs8vx1GB48eHod3isa2iKi&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: g=NtJQcAtCORfpKa7PMJXr_1742302150989; ts=1742302150
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=lrhR-Xu2Vn5xeulD3h3wrAgue70&google_push=AXcoOmQnDfz9ywAbJucVOGYSDF65zrz4bgt3YsUzAhb77XJY5XlL4_4qdRLxuycT1AJQ-D1Tu4ocH_y--UCnZ5hj3l66XFB9Tr5ONM8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; APC=AfxxVi416UCJxPn0EC-tV2G_srkelm3Aoaot5bCHe0kTdLwoozk_Tw; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmRxer951VS2yYI9e8kTizhIr3UHkiXbjvAbAB5_BfqR6a-qU-pLPQYbi6i50PvpOP2b4eIHJNAPjAK6tQlxBBwX4Cg7x_5TFPu1FQ&google_hm=3fa31b52134e37b7257c1k00m8ehprmn HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; APC=AfxxVi416UCJxPn0EC-tV2G_srkelm3Aoaot5bCHe0kTdLwoozk_Tw; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /match/bounce/current?DotomiTest=369da45bdcf5162c&is_secure=true&networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV HTTP/1.1Host: dclk-match.dotomi.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=369da45bdcf5162c
Source: global traffic	HTTP traffic detected: GET /search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9lrxdHM6S8ALV6kAHuYuwAA; CMPS=3475; CMPRO=3475
Source: global traffic	HTTP traffic detected: GET /generate_204?pKqyCw HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESELgJxmC6fMMGbK7gURmh9ao&google_cver=1&google_push=AXcoOmR3gvPd1E8ld1mjS71Uw9_GYOklhlxjJrSK-Y6PM-U-a9XOPqr8bKYtm9fmohSw94tiulQXTAiyyNcTVG21TdmTb9AUrPcmyOQ HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gcm?google_gid=CAESEGp5OZ8dSgl_Koq5kz46krM&google_cver=1&google_push=AXcoOmQBgtzBYOeJ8tXT1yWAWFN5AaDMuVM8azBy2ufuzS3iBEbSsFh5Zj0gwUHa7qkaM1Al27cHMPVIgvrsPM55PfF5WtsxNn8DSYg HTTP/1.1Host: a.c.appier.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEGDRnuq9VMkvu_PfQu70Onw&google_cver=1&google_push=AXcoOmSbtTEKtOyaTwcsbG7QzuFNVCiTJTfbsE6hdLTxQnB0MgrTOdES4W-7RGKM8f85SWdOvJyg-SIgHlJ5QxIG3tc6BGWoU-Ow9wo HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirus%26oq%3Dvirus%26gs_lcrp%3DEgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=wUDAWDM-pA6wf6TbdKGc5kH_F3LvyKKJSz6M8Z0Qbg4EcNLx1V2WOcgvsGcabJDnGp7C_07CWE-qz_h4EjocV7enTV7TMP9XsoCqsnnbrBgWs6k-N7dz-4Mdm-50ft-WfVWhx8amnmpUfkxB31iRCr5Unki3V9CGFUtZjdTcINlcTbEoqbe2wmverorESwC5KIQRuBfrStG8vPU
Source: global traffic	HTTP traffic detected: GET /search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8&sei=yGvZZ6XxA9fzi-gP7NXC0QQ HTTP/1.1Host: www.google.comConnection: keep-alivertt: 300downlink: 1.5sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-form-factors: "Desktop"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.google.com/search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=wUDAWDM-pA6wf6TbdKGc5kH_F3LvyKKJSz6M8Z0Qbg4EcNLx1V2WOcgvsGcabJDnGp7C_07CWE-qz_h4EjocV7enTV7TMP9XsoCqsnnbrBgWs6k-N7dz-4Mdm-50ft-WfVWhx8amnmpUfkxB31iRCr5Unki3V9CGFUtZjdTcINlcTbEoqbe2wmverorESwC5KIQRuBfrStG8vPU; SG_SS=*ekaaRh7yAAYDHskLIx59mXrB6sVdqjQEADQBEArZ1L0ecMbku4BxVndpeVGuprJIxh_wF4WTCXswPD_hGZCNzeRk4vw53NLSYouAukCEPQAAADltAAAADVcBB0EANcct7zdKgKN1hdg4yuGCo5warMKznX7V46bXTDRwgxr9vZeaCDI6y5xLqQmIe4RWFCY_SAqhpgI2cl5OXH6ILROsNP9vhtB9GO_e84Lgts6zVdICar0xFmZb1fcYgkxFDA2xXNKbNyMGJG29xfmKN43vxkVitGX0KbfheS92zDESL1hpTfjJ44RglbYjEd6SSDPbW2FVIxFt8IDQb8t_Ky1EWLHBbmXt4sNlJRdJRXXTgjx3F9HU0tnwdHdxmJnaDADcG3rOP6cvtYJHhyeZcQ8DITKMVMiGmVuqkBej0Lj1gZBnIZOXij4GDjkfOCGPS8_n9LnlBE6Xkxp5NYgialEoQzzs5S_e1nuD4-8Bgym69QYQfCSDyluAfprPfxCljGL34tObY1bfn6Wwi5URReQrLnVqsIWVp2X-2KcD-uK_Qgw6Q-uDFJ6LDzxrRljYUvIYK1l5UddFabks0l7l2lnzROjaoS_d-MbAiSqd42JjqEMoc-cyftewVrohWTKKg0187kg7wb4YDXy_5hyACG2Q-9NxuA6pKbxYmkiu7_Y5Abrayolq9FE6NofJd1fQjfrW43b6pA-DAnYzK8SQ3YqH0DkpDkyIklcfawgXvl5QGXGU-x-UubnKpP0xtUOFdLN8SiYce0ReroVltqQMc3_XjXWKKowr0aXQDDS34zpL4UDl3QcK6Wqyz0WXSceZvjNxfBgVfSk2-rrhsQiyvUA3-DLlueKNyi_j_cHyPpIghzYJxyhPR4zIt3c
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9lrxdHM6S8ALV6kAHuYuwAA; CMPS=3475; CMPRO=3475
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=1QaVEwp7Qq8bM4bejR7CQw&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=linkedin&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmnlJWgr0rgTO8bZr9KF_IAsFgXcD9yM8Ge90JPxNPVc_vqw5H8SpeF3xABqdc; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8&sei=yGvZZ6XxA9fzi-gP7NXC0QQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAAIgAAEAokwAAAAAITggA2QEAAACADyAQpwqgAAAAAAAgAEgAAAAAACAAQAAAJIQAAEAUAAAAAAIQQgAAEABgAgAARAAACAQAAAiBAQCgAQAAAIAAQC0FEAcAIAAAAwCAAyAASAAAAITAAhAAAEAJAQABAAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACACAAIBAAAEAAQAgAwAKAAABAgAAB6AEAAPgAAIAEiAEAoAAMQAKAQABAAYAMAAgAAAAkEAAAAIAsEOIwYAAEAAAAAAABAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oFxmf1GcJ78iQvY7t18fA26x4fzmw/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: text/css,/;q=0.1X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirus%26oq%3Dvirus%26gs_lcrp%3DEgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB%26sourceid%3Dchrome%26ie%3DUTF-8%26sei%3DyGvZZ6XxA9fzi-gP7NXC0QQ&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CIXToqfVk4wDFXqlgwcdeRgz-Q HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: event-source=navigation-source, triggerAttribution-Reporting-Support: web=osX-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /images/nav_logo321.webp HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8&sei=yGvZZ6XxA9fzi-gP7NXC0QQAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAIIACEAABAAAAAAAAQAIAAQAAAAAAACABAAAAAADAgAAgIEgAAAAgAAAAAAAAJgAABEIWgIACAAAAAAAAAAAAAgAAAICACAD7_YcBAAAAAAAAEAAAAAAAEIAEAAAAAAAAAC4AAAjAAITsAgIAAAAAAAAAIAAAAAAAACAAAAAAAEAAAACAAgAAAAAAAAAABAAAAAAAAAgAAAAQAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAKAAAAL4AQAAAAAAOAAAAIAAAAAAOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=1/ed=1/dg=3/br=1/rs=ACT90oFIitvGQkIgaiyAofe-2xl4MpQiOA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DMzTfb:fNTHad;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FqHJkd:yQamIb;G0KhTb:LIaoZ;G6wU6e:hezEbd;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;Qw8Feb:jpavUe;R2kc8b:ALJqWb;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TroZ1d:vVVzjb;TxfV6d:YORN0b;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;Uvc8o:VDovNc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;Zen4yb:jMF88c;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;flqRgb:ox2Q7c;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:iAmrSd;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;iySzae:a6xXfd;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;lkq0A:JyBE3e;mWzs9c:fz5ukf;mzW4Id:nYdusb;nAFL3:NTMZac,s39S4;nJw4Gd:dPFZH;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb,yDVVkb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;rdexKf:FEkKD;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tGdRVe:CS1mob;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uknmt:GkPrzb;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;ysNiMc:CpIBjd;yxTchf:KUM7Z;
Source: global traffic	HTTP traffic detected: GET /verify/AH5-l65D9H8-LEQaV8hvD3FHXP33pSWQo_Xthf3_0ZtgKmQbM6UPsL1oLDA9Hiwv5QMYceBzzT6rjA1Dwx_hJxbL0oeOJSINXciU4HGjfw5Axe3Pgg HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=X5MnuNtvkybozKdwHNNOhNsXzlu2eG3m6HdtsZGw2nkUOh04-zVhNknnzbE5sWfF3DWDKJNK0SttAX9hjMwIP06kuqYBziazQzcdlZIf7yYEXtT2OE_cg5WhfbHlmAkW7-Kz1lJj03H8m7TD8Td5dtmePFkg1nICcn5UmYi9pRj7021IoYSBkMnxxOBQVrnrGAHvLTAGOeIbT6O6_WoyDxwvOOYluRc9cw-FbSbIOQUg
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivertt: 300downlink: 1.5sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-form-factors: "Desktop"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /search?q=virustotal&sca_esv=3b736228b17ed96f&ei=yGvZZ_-xK_idi-gPtKK5iQc&ved=0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ4dUDCBA&uact=5&oq=virustotal&gs_lp=Egxnd3Mtd2l6LXNlcnAiCnZpcnVzdG90YWxIDVAAWABwAHgBkAEAmAEAoAEAqgEAuAEDyAEAmAIAoAIAmAMAkgcAoAcAsgcAuAcA&sclient=gws-wiz-serp HTTP/1.1Host: www.google.comConnection: keep-alivertt: 300downlink: 1.5sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-form-factors: "Desktop"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=virus&psi=yGvZZ_-xK_idi-gPtKK5iQc.1742302157101&dpr=1&ofp=GK-hje_IiOH1fxiCo-Dn5ISci0cYv-S_6aSUlrk1GLSw24z_oq3oVRirtpvhgtqksqoB&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=virus&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=virus&psi=yGvZZ_-xK_idi-gPtKK5iQc.1742302157101&dpr=1&ofp=EAEYr6GN78iI4fV_GIKj4OfkhJyLRxi_5L_ppJSWuTUYtLDbjP-irehVGKu2m-GC2qSyqgEy0QEKHgocdmlydXMgZGVmaW5pdGlvbiBpbiBjb21wdXRlcgoZChd2aXJ1cyBkZWZpbml0aW9uIHNpbXBsZQoQCg50eXBlcyBvZiB2aXJ1cwocChp0eXBlcyBvZiB2aXJ1c2VzIGluIGh1bWFucwoRCg92aXJ1cyBub3RlcyBwZGYKFwoVdmlydXMgY2hhcmFjdGVyaXN0aWNzCiUKI2RlZmluaXRpb24gb2YgdmlydXMgaW4gbWljcm9iaW9sb2d5Cg8KDXZpcnVzIGRpYWdyYW0QRzJ2CicKJVdoYXQgaXMgYSBzaW1wbGUgZGVmaW5pdGlvbiBvZiB2aXJ1cz8KKQonV2hhdCBhcmUgdGhlIHN5bXB0b21zIG9mIHRoZSBuZXcgdmlydXM_Ch0KG0hvdyBsb25nIGRvZXMgYSB2aXJ1cyBsYXN0PxDkAg HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=virustotal&cp=10&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=virus&psi=yGvZZ_-xK_idi-gPtKK5iQc.1742302157101&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy5to,sy4tv,DpX64d,uKlGbf,sy5tp,EufiNb,sy4bd,syxj,syxi,syxb,syxh,syxk,XCToU,sy5m3,sy3pp,sy2dk,tIj4fb,sy2ec,w4UyN,sy1aa,sy19c,syko,syjk,sy11x,Mbif2,ipWLfe,sy1ac,QVaUhf,sy4w7,sy4w6,sy4w5,sy4w4,SJpD2c,sy868,sy2ic,sy13a,sy2i6,sy2en,syuj,syfy,sy85u,sy83a,sy15f,sy158,sy151,sy153,sy13g,sy13f,sy12x,sy13h,sy13b,sy354,syxw,bEGPrc,sy1rx,sy86a,sy869,mBG1hd,sy66f,mscaJf,sy6in,sGwFce,HxbScf,eAR4Hf,sy6io,sy4tb,h3zgVb,lRePd,sy4w1,nN2e1e,sy5vd,sy6ip,sy278,IRJCef,sy86b,sy5ve,scFHte,pr5okc,IFqxxc,sy4w2,OXpAmf,sy6j0,sy4t5,sy4t4,sy16r,sy13i,sy138,sy139,sy134,sy135,sy132,sy131,sy133,syza,syzb,syz6,syzc,syz5,syzd,syyx,syyw,syyy,syze,syzf,GElbSc,sytt,sytq,sytp,sytn,DPreE,sy6ik,xdV1C,sy5t9,HYSCof,sy8el,sy6gk,sy1v1,sy1p9,KSk4yc,sy6v8,I2A9n,syw9,syw8,rtH1bd,syur,syuu,syut,syux,syuw,syuv,syup,syg4,syu9,SMquOb,EiD4Fe,sywi,sywg,sywf,sywc,sytw,sywe,d5EhJe,syxy,sy1rs,sy1rr,sy1rq,sy1rp,sy1ro,sy1rn,sy1rk,sy1o6,sy14t,sy1f3,sy1f5,sy1f4,sy1f2,sywr,syus,sywo,sywt,T1HOxc,sywp,sywm,sywn,sywj,zx30Y,sy1rw,sy1rv,sy1rh,Wo3n8,sy4b9,sy1mz,rhe7Pb,sy1sw,EbPKJf,sy1s6,sy1s4,symr,sy1qt,CnSW2d,sy1sz,sy1sy,sy1sx,pFsdhd,sy8mt,sy8mz,sy6vk,syxe,B8bawb,sy4vc,arTwJ,RagDlc,sy1ri?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q;
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy1rf,gSZvdb,sy5r2,cSX9Xe,sy6v4,nPaQu,sy49l,syx4,GCSbhd,sy4aj,syx6,syx7,QhoyLd,sy7kd,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy6vd,sy4hn,sy1b3,sG005c,aZ61od,sy4ve,sy2dy,hspDDf,sy8hq,sy8n2,sy8n1,sy4ii,sy1n3,syug,sy1nh,sy8mr,sy8n0,sy8mw,sy8mq,sy4b5,sy8mp,sy8ms,sy6vu,sy4in,sy2dd,sy2df,sy2dc,sy2dv,fREC7d,sy1kr,sy12o,syz4,sy8mv,sy8mu,sy843,sy6vg,syyu,ZYZddd,sy6vf,etGP4c,sy844,sy6ve,peG5,sy6vh,syvu,syvz,SrMpob,sy5te,sy12u,sy12p,sy12q,sy12t,m1Ro8b,sy4ay,msmzHf,sy7dz,sy3s4,SC7lYd,oUlnpc,sy8g9,sy8ga,sy6ok,sy4mt,sy2tg,sy1tj,sy1od,sy1pr,Da4hkd,sy49o,fVaWL,sy1tk,sy1th,sy1tg,sy1tf,sywx,syx0,syww,aD8OEe,sy6oi,sy1w6,xfmZMb,sy3q0,Elkdbc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en.fukt8OIT_bI.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAIIACEAABAAAAAAAAQAIAAQAAAAAAACABAAAAAADAgAAgIEgAAAAgAAAAAAAAJgAABEIWgIACAAAAAAAAAAAAAgAAAICACAD7_YcBAAAAAAAAEAAAAAAAEIAEAAAAAAAAAC4AAAjAAITsAgIAAAAAAAAAIAAAAAAAACAAAAAAAEAAAACAAgAAAAAAAAAABAAAAAAAAAgAAAAQAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAKAAAAL4AQAAAAAAOAAAAIAAAAAAOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/rs=ACT90oFIitvGQkIgaiyAofe-2xl4MpQiOA HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=COeXgarVk4wDFQmSgwcdYqMRug HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger, event-sourceAttribution-Reporting-Support: web=osX-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /verify/AH5-l66RjxRYlZia8kx-lhkL99gG67KcI0KlMQF1gPq9Tud4QjnMLas_PW5IUMerg7nd4jcpp5zFVHoMMaUppyaCNRdWcsnab4BspagQpG1YYyWDkw HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: SNID=ACT1_oNqWGRih2tfeCSplo8MqU27FDRFK9c25upGqAmuoTHQvncZ6n02X9eDa-dpVHo8-7kdDkt3juQ_Q9S-7BMAvZmPK9pRCfU; AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=GLSw24z_oq3oVRim-pvSoNSruqgBGMDc3afXo-zS6QEYu_LIu9ygv6x1GL7huuvElLfoLQ&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=virustotal&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=EAEYtLDbjP-irehVGKb6m9Kg1Ku6qAEYwNzdp9ej7NLpARi78si73KC_rHUYvuG668SUt-gtMq4BChEKD3ZpcnVzdG90YWwgc2NhbgoVChN2aXJ1c3RvdGFsIGRvd25sb2FkChgKFnZpcnVzdG90YWwgYWx0ZXJuYXRpdmUKFQoTaXMgdmlydXN0b3RhbCBsZWdpdAoTChF2aXJ1c3RvdGFsIHJlZGRpdAoQCg52aXJ1c3RvdGFsIGFwaQoQCg52aXJ1c3RvdGFsIGFwcAoWChR2aXJ1cyBzY2FubmVyIG9ubGluZRBH HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy5to,sy4tv,DpX64d,uKlGbf,sy5tp,EufiNb,sy4bd,syxj,syxi,syxb,syxh,syxk,XCToU,sy5m3,sy3pp,sy2dk,tIj4fb,sy2ec,w4UyN,sy1aa,sy19c,syko,syjk,sy11x,Mbif2,ipWLfe,sy1ac,QVaUhf,sy4w7,sy4w6,sy4w5,sy4w4,SJpD2c,sy868,sy2ic,sy13a,sy2i6,sy2en,syuj,syfy,sy85u,sy83a,sy15f,sy158,sy151,sy153,sy13g,sy13f,sy12x,sy13h,sy13b,sy354,syxw,bEGPrc,sy1rx,sy86a,sy869,mBG1hd,sy66f,mscaJf,sy6in,sGwFce,HxbScf,eAR4Hf,sy6io,sy4tb,h3zgVb,lRePd,sy4w1,nN2e1e,sy5vd,sy6ip,sy278,IRJCef,sy86b,sy5ve,scFHte,pr5okc,IFqxxc,sy4w2,OXpAmf,sy6j0,sy4t5,sy4t4,sy16r,sy13i,sy138,sy139,sy134,sy135,sy132,sy131,sy133,syza,syzb,syz6,syzc,syz5,syzd,syyx,syyw,syyy,syze,syzf,GElbSc,sytt,sytq,sytp,sytn,DPreE,sy6ik,xdV1C,sy5t9,HYSCof,sy8el,sy6gk,sy1v1,sy1p9,KSk4yc,sy4ay,msmzHf,sy7dz,sy3s4,SC7lYd,sy7kd,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/x0v5TSWbgkg/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lV1zr3tGQQWYPvIl26GaywFEberw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/v8fRusw26IA/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lUX2FHndjDzIURPsJS5ZExpo-D8g HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy8uo,sy7ir,HWk0Gf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en.fukt8OIT_bI.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAIIACEAABAAAAAAAAQAIAAQAAAAAAACABAAAAAADAgAAgIEgAAAAgAAAAAAAAJgAABEIWgIACAAAAAAAAAAAAAgAAAICACAD7_YcBAAAAAAAAEAAAAAAAEIAEAAAAAAAAAC4AAAjAAITsAgIAAAAAAAAAIAAAAAAAACAAAAAAAEAAAACAAgAAAAAAAAAABAAAAAAAAAgAAAAQAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAYAKAAAAL4AQAAAAAAOAAAAIAAAAAAOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/rs=ACT90oFIitvGQkIgaiyAofe-2xl4MpQiOA HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=UMk45c,bplExb,nMfLA,O19q8,xMHx5e,o7oVhd,R6UkWb,tW711b,UX8qee,tDA9G,dMJ4he,sy4vf,sy32o,sy11w,sy2wy,syr1,sy2wv,sy2ws,syy3,syy1,sy148,syyi,syy0,syyg,syv1,syy6,syy4,syy5,sy16i,sy16j,sy16k,sy16h,sy145,sy146,sy147,sy3jf,sy3aw,sy19a,sy144,sy12h,sy12e,sy12c,sy12d,sy3br,sy32m,sy199,sy13m,sy14u,sy130,sy12y,sy13l,Eox39d,sy7x,sy7w,syih,syid,syie,syic,syiq,syio,syin,syim,syii,syib,syc7,sye5,sye6,syc9,sycn,sycg,syck,sycj,syci,sycf,syc4,sycd,syce,sycl,sycq,syco,syca,sybz,syc8,syc5,sycs,sycr,syc3,sybt,sybq,sybm,syba,syax,sybo,syay,syad,sye8,sye3,sydr,sydv,sydm,sydl,sydg,sydf,syac,syab,syde,sydd,sydk,sydh,syda,syd9,syd8,syd6,syd5,syd7,syd2,syaq,syd0,sybj,sybf,syaz,sybd,syb2,syb1,syb9,syb7,syb6,syb0,syaf,sya3,syd3,sycu,sycv,sybs,sybw,sydi,syi1,syia,syi6,syi7,sy84,sy80,sy83,syi3,syg6,syi8,syi2,syi0,syhx,syhw,syhv,syht,sy8f,uxMpU,syhl,syej,sydo,syee,syeg,sye9,syei,syeb,syeh,sybv,sycw,syec,sye4,sy94,sy8z,sy8y,sy8x,sy8w,Mlhmy,QGR0gd,OTA3Ae,sy7y,EEDORb,PoEs9b,Pjplud,sy8s,sy8o,sy8m,A1yn5d,YIZmRd,uY49fb,sy8c,sy8a,sy8b,sy89,sy87,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy9a,sy98,sy8e,xUdipf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=897&ei=yGvZZ_-xK_idi-gPtKK5iQc&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/ HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?q=virustotal&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=EAEYtLDbjP-irehVGKb6m9Kg1Ku6qAEYwNzdp9ej7NLpARi78si73KC_rHUYvuG668SUt-gtMq4BChEKD3ZpcnVzdG90YWwgc2NhbgoVChN2aXJ1c3RvdGFsIGRvd25sb2FkChgKFnZpcnVzdG90YWwgYWx0ZXJuYXRpdmUKFQoTaXMgdmlydXN0b3RhbCBsZWdpdAoTChF2aXJ1c3RvdGFsIHJlZGRpdAoQCg52aXJ1c3RvdGFsIGFwaQoQCg52aXJ1c3RvdGFsIGFwcAoWChR2aXJ1cyBzY2FubmVyIG9ubGluZRBH HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/x0v5TSWbgkg/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lV1zr3tGQQWYPvIl26GaywFEberw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=GLSw24z_oq3oVRim-pvSoNSruqgBGMDc3afXo-zS6QEYu_LIu9ygv6x1GL7huuvElLfoLQ&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=897&ei=zmvZZ-j8Gpygi-gP1JuUyAU&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.5sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CLf3ygE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/v8fRusw26IA/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lUX2FHndjDzIURPsJS5ZExpo-D8g HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirustotal%26sca_esv%3D3b736228b17ed96f%26ei%3DyGvZZ_-xK_idi-gPtKK5iQc%26ved%3D0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ4dUDCBA%26uact%3D5%26oq%3Dvirustotal%26gs_lp%3DEgxnd3Mtd2l6LXNlcnAiCnZpcnVzdG90YWxIDVAAWABwAHgBkAEAmAEAoAEAqgEAuAEDyAEAmAIAoAIAmAMAkgcAoAcAsgcAuAcA%26sclient%3Dgws-wiz-serp&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2fhdmxF85Nlcm6j6x4UaS2XZ58xmTa21Zze0B5Dv3khyaeDKPqcrMs; NID=522=OLjS2JJP6TP3_uTdi5YCW30v0vKTrMLm7okcM5M9E6yh36REoveO8jxzP85PZWYoNP6HTWSkXNt9dEvcLZSKEdTSXBPWOOBkTcn1HgwHzrX9-VOZ7wUj9a24E38ncmIOFbh2ZPuPTpqFrpXMZKVLPOnIPs_Ww4sxuMKK9D3FqhXcRcbYTHdNPtQocqcFps1_tD0rJ404SWGydJxyRwlakoS-h7U_ddIEDSFzVcHOXdhBE4XGcJ2Tu1Bs2Q; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /gui/main.b7eafdc0ce3b9847e547.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/2121f4aabac6fbe523ec.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveOrigin: https://www.virustotal.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/1402accbefdec6a25762.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveOrigin: https://www.virustotal.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/ee990a93df71bfdfb3b5.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveOrigin: https://www.virustotal.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/user_notifications HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTk5NjM5NTM5MzEtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTY1LjAyNQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/cookie_disclaimer HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTg3NjY2OTExOTgtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTY1LjAzNw==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302163.0.0.0; _ga=GA1.1.1710647701.1742302163
Source: global traffic	HTTP traffic detected: GET /gui/88220.bce08926377ca249c37c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-shell-extra-deps.1ea95e5e7447cb3e0f5b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/cookie_disclaimer HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25076.be47e378edc0f5eb13be.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36253.6a6626356ee48884db11.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/user_notifications HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88116.55042d85007929debb5d.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=pa32qkvrm1ys HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/static/qrcode.min.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1710647701.1742302163; _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 HTTP/1.1Host: recaptcha.netConnection: keep-aliveAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerSec-Fetch-Storage-Access: activeReferer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=pa32qkvrm1ysUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/images/favicon.svg HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/static/opensearch.xml HTTP/1.1Host: www.virustotal.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/manifest.json HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/service-worker.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.virustotal.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/images/favicon.svg HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/images/manifest/icon-192x192.png HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/images/manifest/icon-192x192.png HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/sha256.worker.5553997fe32b1412e31e.worker.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.virustotal.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTM4Mzc4MTIzMDAtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTgyLjAwMQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/submission/challenge HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"Cache-Control: no-cachesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTg0MDE4NjE4OTgtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTgyLjc3Mg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/86662.4a563b2d7d2bb4ab0751.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/49272.a1a64aa6f85fd5188f70.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/25924.5aa1f9a2acb49c298cb1.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/32857.df6177f701955dabcec9.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/60996.2e1f6a0fa47a1d17ba4b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/47031.2babf16af54b794b0c1c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/1700.09426cce096447a02e29.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/submission/challenge HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/64098.e0e849e8e6828c121862.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/service-worker.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.virustotal.com/gui/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1If-None-Match: "N6RY-w"
Source: global traffic	HTTP traffic detected: GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/5105.11818c0a944f71cefe35.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/54293.ce5fa7cf9a8db923269f.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/64227.ec7361ba540553734143.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/submissions/add HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/88687.6297bb050979438e59ed.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/19831.b7dc4ed50a3bcf2c981c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/64630.fc3b5fa709ff1a97d690.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/58686.b9101021c1a7ed4869ca.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/33274.0b7f0961cbbe09ee97b9.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/75884.7af759084f26221be9e7.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/38347.5580e8a2a4c5432ff76c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/84569.9af2f84102456a40d9eb.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/33589.0bdf980bd22407ac2cdb.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/13420.d3d46638faf8c55e02cf.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/5796.c746c3b6bc746c9c5e64.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/60658.946f751cfad57f08a870.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTc2MDM3MjExOTEtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg2LjE2NA==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/63143.bf735ffdec3952120f9f.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/70145.f771782b108b9ecf1c7c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/submission/challenge HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"Cache-Control: no-cachesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTYxOTU2MTkwMjEtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg2Ljc3Mw==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/75927.c0cde54382ee19d6541c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/51452.fa648ae8305fd7561efb.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/76220.4d74cdc1503bb9d7f60a.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/21696.ac72ae4c42f0709d8314.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/23577.5510068cfbd3eca89a8c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/submission/challenge HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/45934.9540fa6fd161f61e2993.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/service-worker.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.virustotal.com/gui/service-worker.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1If-None-Match: "N6RY-w"
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/submissions/add HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTQ1ODM4MTU0MjgtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjA0sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/dropped_files HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTE5MTE0NjAzMzYtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_urls HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTY1MTkyMDA3NTYtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_domains HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTYyMTc1NzUxMTYtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTMxMTE5MDY2MDMtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/execution_parents HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTYxMzAzOTA1MjMtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_urls HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_parents HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTA3NDU2NDc4NDktWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/bundled_files HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTk5NTA2MDQ5NjctWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_domains HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_children HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTUyODM5MTc2ODctWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mitre_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTA3NTU1MDcyNTEtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwOA==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mbc_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTI0NTk5MzIxNjktWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwOA==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/bundled_files HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/mitre_format?link=true HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTYzNTc0NzQ5OTUtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/dropped_files HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviours?limit=40 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTE3NjcwMjU1MjktWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjEwOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_parents HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/execution_parents HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?relationships=item%2Cvoter HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTUxNTk2MTE1ODYtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjkxOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/comments?relationships=item%2Cauthor HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTYwODU5NTE3MTAtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjkxOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/graphs?relationships=owner%2Cviewers%2Ceditors HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTcyOTQzMTcwNjItWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg4LjkxOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_children HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_domains?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTY3NTA3ODIxOTYtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg5LjEwOA==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mitre_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTE3MzU2MDQwODAtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg5LjIwMg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?relationships=item%2Cvoter HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/dropped_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTUwNzg0NDA5MTctWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg5LjYxOQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/comments?relationships=item%2Cauthor HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_parents?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTc1ODIxNjU1MDgtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTg5Ljk1Nw==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviours?limit=40 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/execution_parents?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTk4MTcxMjMwOTMtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTkwLjExMQ==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mbc_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?limit=10&relationships=item%2Cvoter&cursor=Cs8BChEKBGRhdGUSCQjYs6in-O6BAxK1AWoRc352aXJ1c3RvdGFsY2xvdWRynwELEgZTYW1wbGUiQDdjOTA3OTVjOWIyOGZhYzk3ODM4NjYyNmY1YTU0MDMzZGM5Y2JhNDZlZjZhM2Y3NDJmYzdkNTJiMzk0NTkwZjIMCxIEVm90ZSJJN2M5MDc5NWM5YjI4ZmFjOTc4Mzg2NjI2ZjVhNTQwMzNkYzljYmE0NmVmNmEzZjc0MmZjN2Q1MmIzOTQ1OTBmMi1jMjIwNTJmNgwYACAB HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTg5MTEzMjgxNTUtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTkwLjgxNA==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/graphs?relationships=owner%2Cviewers%2Ceditors HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/comments?limit=10&relationships=item%2Cauthor&cursor=CtIBChEKBGRhdGUSCQjjiq2A5v2BAxK4AWoRc352aXJ1c3RvdGFsY2xvdWRyogELEgZTYW1wbGUiQDdjOTA3OTVjOWIyOGZhYzk3ODM4NjYyNmY1YTU0MDMzZGM5Y2JhNDZlZjZhM2Y3NDJmYzdkNTJiMzk0NTkwZjIMCxIHQ29tbWVudCJJN2M5MDc5NWM5YjI4ZmFjOTc4Mzg2NjI2ZjVhNTQwMzNkYzljYmE0NmVmNmEzZjc0MmZjN2Q1MmIzOTQ1OTBmMi02ZGM4Yzc4NgwYACAB HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTg5NDQzODE0NTUtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTkxLjEyMg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mitre_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveAccept-Ianguage: en-US,en;q=0.9,es;q=0.8sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-VT-Anti-Abuse-Header: MTM2MDAxNzEwNDUtWkc5dWRDQmlaU0JsZG1scy0xNzQyMzAyMTkxLjQwNg==sec-ch-ua-mobile: ?0X-Tool: vt-ui-mainx-app-version: v1x357x1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsoncontent-type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_domains?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/dropped_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/main.b7eafdc0ce3b9847e547.js.map HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/main.b7eafdc0ce3b9847e547.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/icon.types-peexe.d2868179402000c6d4c8.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?limit=10&relationships=item%2Cvoter&cursor=Cs8BChEKBGRhdGUSCQjYs6in-O6BAxK1AWoRc352aXJ1c3RvdGFsY2xvdWRynwELEgZTYW1wbGUiQDdjOTA3OTVjOWIyOGZhYzk3ODM4NjYyNmY1YTU0MDMzZGM5Y2JhNDZlZjZhM2Y3NDJmYzdkNTJiMzk0NTkwZjIMCxIEVm90ZSJJN2M5MDc5NWM5YjI4ZmFjOTc4Mzg2NjI2ZjVhNTQwMzNkYzljYmE0NmVmNmEzZjc0MmZjN2Q1MmIzOTQ1OTBmMi1jMjIwNTJmNgwYACAB HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/comments?limit=10&relationships=item%2Cauthor&cursor=CtIBChEKBGRhdGUSCQjjiq2A5v2BAxK4AWoRc352aXJ1c3RvdGFsY2xvdWRyogELEgZTYW1wbGUiQDdjOTA3OTVjOWIyOGZhYzk3ODM4NjYyNmY1YTU0MDMzZGM5Y2JhNDZlZjZhM2Y3NDJmYzdkNTJiMzk0NTkwZjIMCxIHQ29tbWVudCJJN2M5MDc5NWM5YjI4ZmFjOTc4Mzg2NjI2ZjVhNTQwMzNkYzljYmE0NmVmNmEzZjc0MmZjN2Q1MmIzOTQ1OTBmMi02ZGM4Yzc4NgwYACAB HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/execution_parents?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mitre_trees HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/main.b7eafdc0ce3b9847e547.js.map HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1742302163.1.0.1742302165.0.0.0; _ga=GA1.2.1710647701.1742302163; _gid=GA1.2.1325265220.1742302167; _gat=1

Source: global traffic	DNS traffic detected: DNS query: www.majorgeeks.com
Source: global traffic	DNS traffic detected: DNS query: ra.majorgeeks.com
Source: global traffic	DNS traffic detected: DNS query: cdn-images.mailchimp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.buymeacoffee.com
Source: global traffic	DNS traffic detected: DNS query: img.buymeacoffee.com
Source: global traffic	DNS traffic detected: DNS query: platform-api.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: c.pki.goog
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.majorgeeks.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: files1.majorgeeks.com
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: g.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: cdn.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: serve.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: dsp-cookie.adfarm1.adition.com
Source: global traffic	DNS traffic detected: DNS query: ads.travelaudience.com
Source: global traffic	DNS traffic detected: DNS query: tr-us.adsmoloco.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: onetag-sys.com
Source: global traffic	DNS traffic detected: DNS query: gtrace.mediago.io
Source: global traffic	DNS traffic detected: DNS query: dclk-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: a.c.appier.net
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: sync.gonet-ads.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: gcm.ctnsnet.com
Source: global traffic	DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ajs-assets.ftstatic.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: www.virustotal.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons2.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons3.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons4.gvt2.com

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-4Y94MPWMLL&gtm=45je53d3v9101948670za200&_p=1742302140344&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719~102887799&cid=2002398376.1742302142&ecid=837158340&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1742302141&sct=1&seg=0&dl=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&dt=Download%20GS%20Auto%20Clicker%203.1.4&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2747 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.majorgeeks.comX-Client-Data: CLf3ygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.majorgeeks.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54820
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 54820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443

Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.11.141:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.248:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.248:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.10.141:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.10.141:443 -> 192.168.2.17:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.112.27:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.199:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.15:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.160.150.14:443 -> 192.168.2.17:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.252:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.156:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.156:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.199:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.249:443 -> 192.168.2.17:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.81.2.249:443 -> 192.168.2.17:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.17:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.2:443 -> 192.168.2.17:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.97:443 -> 192.168.2.17:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.161:443 -> 192.168.2.17:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.176.164:443 -> 192.168.2.17:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.17:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.14:443 -> 192.168.2.17:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.171.149:443 -> 192.168.2.17:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.226:443 -> 192.168.2.17:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.14:443 -> 192.168.2.17:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.0.66:443 -> 192.168.2.17:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 107.178.251.134:443 -> 192.168.2.17:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.17:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.168.80:443 -> 192.168.2.17:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.9.254:443 -> 192.168.2.17:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.209.174.12:443 -> 192.168.2.17:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.184.8.90:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.207.16.201:443 -> 192.168.2.17:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.82.210.217:443 -> 192.168.2.17:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.92:443 -> 192.168.2.17:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.85.52:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 82.145.213.8:443 -> 192.168.2.17:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.84.221:443 -> 192.168.2.17:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.109.14.96:443 -> 192.168.2.17:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.70:443 -> 192.168.2.17:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.20.187:443 -> 192.168.2.17:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.37.193:443 -> 192.168.2.17:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.105.8:443 -> 192.168.2.17:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.193.173:443 -> 192.168.2.17:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.200:443 -> 192.168.2.17:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.84.221:443 -> 192.168.2.17:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.139.139:443 -> 192.168.2.17:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.63:443 -> 192.168.2.17:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.147.9:443 -> 192.168.2.17:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.102:443 -> 192.168.2.17:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.17:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.38.181:443 -> 192.168.2.17:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.17:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.171.149:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.17:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.150:443 -> 192.168.2.17:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.150:443 -> 192.168.2.17:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.17:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.17:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.17:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.17:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.110:443 -> 192.168.2.17:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.99:443 -> 192.168.2.17:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.17:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.99:443 -> 192.168.2.17:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50133 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.54.88.138:443 -> 192.168.2.17:50161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.142:443 -> 192.168.2.17:50170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.116.94:443 -> 192.168.2.17:54820 version: TLS 1.2

Source: Yara match

File source: dropped/chromecache_287, type: DROPPED

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6916_1825778733

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6916_1825778733

Source: classification engine

Classification label: clean4.win@32/203@248/741

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\abf1af0e-1f3e-45d3-8e6f-fe4dcfcc60b9.tmp

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3712754414397003611,18260932764131230844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3712754414397003611,18260932764131230844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 963462.crdownload			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\abf1af0e-1f3e-45d3-8e6f-fe4dcfcc60b9.tmp			Jump to dropped file

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\Downloads\Unconfirmed 963462.crdownload	3%	ReversingLabs

Source	Detection	Scanner	Label
https://www.majorgeeks.com/images/icons/red_icon_18x17px.png	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/index.php?ct=core&action=tasks	0%	Avira URL Cloud	safe
https://platform-api.sharethis.com/js/sharethis.js	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/core/javaload/jquery.js	0%	Avira URL Cloud	safe
https://ra.majorgeeks.com/www/delivery/spc.php?zones=3%7C19%7C18%7C2%7C1%7C5%7C8%7C7%7C4%7C10%7C9%7C11%7C12%7C13%7C14%7C15%7C16%7C17&source=&r=62913553&target=_blank&charset=UTF-8&loc=https%3A//www.majorgeeks.com/mg/getmirror/gs_auto_clicker%2C1.html	0%	Avira URL Cloud	safe
https://cdnjs.buymeacoffee.com/1.0.0/button.prod.min.js	0%	Avira URL Cloud	safe
https://cdn-images.mailchimp.com/embedcode/horizontal-slim-10_7.css	0%	Avira URL Cloud	safe
https://img.buymeacoffee.com/button-api/?text=Buy%20a%20Geek%20a%20Coffee&emoji=%E2%98%95&slug=majorgeeks&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff	0%	Avira URL Cloud	safe
https://api.majorgeeks.com/api.js	0%	Avira URL Cloud	safe
https://ra.majorgeeks.com/www/delivery/spcjs.php?id=1&target=_blank	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/index.php?ct=core&action=css&id=2	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/images/mg/sub.png	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/images/logos/majorgeeks.gif	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/images/click_here.gif	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/b/advertisement.js	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy8uo,sy7ir,HWk0Gf?xjs=s3	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=lrhR-Xu2Vn5xeulD3h3wrAgue70&google_push=AXcoOmQnDfz9ywAbJucVOGYSDF65zrz4bgt3YsUzAhb77XJY5XlL4_4qdRLxuycT1AJQ-D1Tu4ocH_y--UCnZ5hj3l66XFB9Tr5ONM8	0%	Avira URL Cloud	safe
https://onetag-sys.com/match/?int_id=19&redir=1&google_gid=CAESENmhBnY01vnW45nHLnLuhcE&google_cver=1&google_push=AXcoOmS3Nid9VBs-ylU03CO5Sf3Yx8TOXrXG_WgnSCMrWLkcHjALcYHQDxO5mk_No9fj_peR1C8-XRZ2uV2cE_E6AdnMd3WrzXt2c_c	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ext/aifromchrome_1723036034.svg+xml	0%	Avira URL Cloud	safe
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEJTRQrI647_u5KtoBEe9QNw&google_cver=1&google_push=AXcoOmTOGBEX3m8xUGKWwSGUT6KCSgpj0_xihTnq6F2-jlVMxkdTRSbeBequ52239b7tPl8AzKuredGbcBPs8vx1GB48eHod3isa2iKi	0%	Avira URL Cloud	safe
https://www.google.com/search?q=virustotal&sca_esv=3b736228b17ed96f&ei=yGvZZ_-xK_idi-gPtKK5iQc&ved=0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ4dUDCBA&uact=5&oq=virustotal&gs_lp=Egxnd3Mtd2l6LXNlcnAiCnZpcnVzdG90YWxIDVAAWABwAHgBkAEAmAEAoAEAqgEAuAEDyAEAmAIAoAIAmAMAkgcAoAcAsgcAuAcA&sclient=gws-wiz-serp	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?s=web&t=aft&atyp=csi&ei=yGvZZ_-xK_idi-gPtKK5iQc&rt=wsrt.321,hst.44,sct.448,frts.500,frvt.514,prt.638,afti.514,afts.530,aftr.534,aft.534&imn=25&dtc=1061&stc=279&ima=1&imad=1&imac=1&wh=897&opi=89978449&nt=navigate&dt=&ts=300&ant=replace	0%	Avira URL Cloud	safe
https://www.google.com/search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/el/AGSKWxUGmRHPFC-h4cyF2-iLYPT9h8CSJb665b2O7uOiksp_Unqhk6xqiAa33ZQNdMgeGfAs857npGO4OpvVGyiLPVwVo_LHIIP7hJsDoMnVZxiA-0Hiy-rBZ6e0lijOhowXor3PqAPqBg==	0%	Avira URL Cloud	safe
https://servedby.flashtalking.com/imp/8/225407;9356677;201;jsappend;DV360;DV360FY24AcrobatDemandGenPSPDocTypeKeywordsTax2025USDSKBAN728x90/?ftOBA=1&ft_domain=www.majorgeeks.com&ft_ifb=1&ft_agentEnv=0&ft_referrer=https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html&us_privacy=${US_PRIVACY}&ft_partnerimpid=ABAjH0jYAqO1NcrQHG7kcMi65eO3&ft_custom=ABAjH0jYAqO1NcrQHG7kcMi65eO3&site_url=https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html&pub_id=1&sup_platform=1&cachebuster=946940.8633899406	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D	0%	Avira URL Cloud	safe
https://sync.gonet-ads.com/match/google?google_gid=CAESEFMKTKf4kh-UWb-owGvJjg0&google_cver=1&google_push=AXcoOmRiDTfiVpvnJzBbTB13pleWxWC6lOO-IXOL0Psp2Lq8TRbprzdb0qPF6Pg9ua6hzHYSk_ufY9EpDgTPomsAhi7fQSIskEUiWAF6Aw	0%	Avira URL Cloud	safe
https://sync.teads.tv/um?ssb_provider_id=3&uid=&google_nid=teadstv_ab&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_ab%26google_hm%3D%5BVID_B64%5D&google_gid=CAESEJU7RBGoOYIGXWf5BRbHmVk&google_cver=1&google_push=AXcoOmSROXRGRlUtsbfh6XtARZDgbJFmPZbnfbE3byWtY8t0r-htkn9jXsytp0zHOHQQjU8cfmTJabb4VsZzM4zaYL9JslG6O4wmE8hD	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?s=web&t=aft&atyp=csi&ei=zmvZZ-j8Gpygi-gP1JuUyAU&rt=wsrt.1068,hst.75,sct.222,frts.259,frvt.259,uddfrt.355,prt.357,afts.300,aft.300&imn=14&dtc=691&stc=174&ima=0&imad=0&imac=2&wh=897&opi=89978449&nt=navigate&dt=&ts=300&ant=push	0%	Avira URL Cloud	safe
https://ads.travelaudience.com/google_pixel?google_gid=CAESEKJXM0Z9gKDy7XrzMooDiKw&google_cver=1&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1742302145&plaf=1%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiapmi=0.33938&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302143993&bpp=7&bdt=3672&idt=1578&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=6585071279416&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=1&uci=a!1&fsb=1&dtd=1608	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CIXToqfVk4wDFXqlgwcdeRgz-Q	0%	Avira URL Cloud	safe
https://t.adx.opera.com/pub/sync?pubid=pub6871767557696&google_push=AXcoOmTcLeeqO1xAewyDG9IDyaBb76fbMwt4r2C0bwR_RgOBH0UD3ivDcWf36I7mnBUtrsSgKwaNoUANUvfd32rsbBF7GLL0GJCLOFvuQA&google_gid=CAESEHIM6RbgYAClzWAylSMb6eU&google_cver=1	0%	Avira URL Cloud	safe
https://www.majorgeeks.com/index.php?ct=files&action=download&	0%	Avira URL Cloud	safe
https://a.c.appier.net/gcm?google_gid=CAESEGp5OZ8dSgl_Koq5kz46krM&google_cver=1&google_push=AXcoOmQBgtzBYOeJ8tXT1yWAWFN5AaDMuVM8azBy2ufuzS3iBEbSsFh5Zj0gwUHa7qkaM1Al27cHMPVIgvrsPM55PfF5WtsxNn8DSYg	0%	Avira URL Cloud	safe
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESELgJxmC6fMMGbK7gURmh9ao&google_cver=1&google_push=AXcoOmR3gvPd1E8ld1mjS71Uw9_GYOklhlxjJrSK-Y6PM-U-a9XOPqr8bKYtm9fmohSw94tiulQXTAiyyNcTVG21TdmTb9AUrPcmyOQ	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/i/ca-pub-6960825562757852?href=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&ers=2	0%	Avira URL Cloud	safe
https://px.ads.linkedin.com/setuid?partner=googleadxdb&google_gid=CAESEEleFwSYldNTQLt9TZ9Wy6E&google_cver=1&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8	0%	Avira URL Cloud	safe
https://dclk-match.dotomi.com/match/bounce/current?networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=linkedin&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8	0%	Avira URL Cloud	safe
https://ep2.adtrafficquality.google/generate_204?pKqyCw	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/xbbe/pixel?d=CJfnugEQw7j0ARjKmdOzAjAB&v=APEucNUHfz8VWJydzYg7a55fEH5V169gffGJtzPtNCrIoj-Q87Y74VA_AEDAv9nRI0f5rantTLDODQVqC3IoQgzHK9_FZiW1qQ	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=yGvZZ_-xK_idi-gPtKK5iQc&s=web&nt=navigate&t=fi&st=3039&fid=1&zx=1742302156956&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=UMk45c,bplExb,nMfLA,O19q8,xMHx5e,o7oVhd,R6UkWb,tW711b,UX8qee,tDA9G,dMJ4he,sy4vf,sy32o,sy11w,sy2wy,syr1,sy2wv,sy2ws,syy3,syy1,sy148,syyi,syy0,syyg,syv1,syy6,syy4,syy5,sy16i,sy16j,sy16k,sy16h,sy145,sy146,sy147,sy3jf,sy3aw,sy19a,sy144,sy12h,sy12e,sy12c,sy12d,sy3br,sy32m,sy199,sy13m,sy14u,sy130,sy12y,sy13l,Eox39d,sy7x,sy7w,syih,syid,syie,syic,syiq,syio,syin,syim,syii,syib,syc7,sye5,sye6,syc9,sycn,sycg,syck,sycj,syci,sycf,syc4,sycd,syce,sycl,sycq,syco,syca,sybz,syc8,syc5,sycs,sycr,syc3,sybt,sybq,sybm,syba,syax,sybo,syay,syad,sye8,sye3,sydr,sydv,sydm,sydl,sydg,sydf,syac,syab,syde,sydd,sydk,sydh,syda,syd9,syd8,syd6,syd5,syd7,syd2,syaq,syd0,sybj,sybf,syaz,sybd,syb2,syb1,syb9,syb7,syb6,syb0,syaf,sya3,syd3,sycu,sycv,sybs,sybw,sydi,syi1,syia,syi6,syi7,sy84,sy80,sy83,syi3,syg6,syi8,syi2,syi0,syhx,syhw,syhv,syht,sy8f,uxMpU,syhl,syej,sydo,syee,syeg,sye9,syei,syeb,syeh,sybv,sycw,syec,sye4,sy94,sy8z,sy8y,sy8x,sy8w,Mlhmy,QGR0gd,OTA3Ae,sy7y,EEDORb,PoEs9b,Pjplud,sy8s,sy8o,sy8m,A1yn5d,YIZmRd,uY49fb,sy8c,sy8a,sy8b,sy89,sy87,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy9a,sy98,sy8e,xUdipf?xjs=s3	0%	Avira URL Cloud	safe
https://gcm.ctnsnet.com/int/cm?exc=1&acc=crimtan&google_gid=CAESEBtVX6nqH20-f2Wfnb6StS4&google_cver=1&google_push=AXcoOmQgsIsHl1eJQY9Iex0QLLY2dhSa3Guu9jUjLeuYa_iM7Ilun7rc01je3SDB9k0E6r_1O7u0A21L2NRQgwQmOOkl8FhPg4CRHA	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=1QaVEwp7Qq8bM4bejR7CQw&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/index-35ea2358.css	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirus%26oq%3Dvirus%26gs_lcrp%3DEgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirustotal%26sca_esv%3D3b736228b17ed96f%26ei%3DyGvZZ_-xK_idi-gPtKK5iQc%26ved%3D0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ4dUDCBA%26uact%3D5%26oq%3Dvirustotal%26gs_lp%3DEgxnd3Mtd2l6LXNlcnAiCnZpcnVzdG90YWxIDVAAWABwAHgBkAEAmAEAoAEAqgEAuAEDyAEAmAIAoAIAmAMAkgcAoAcAsgcAuAcA%26sclient%3Dgws-wiz-serp&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13Jl2_Hcs5HTnj4cEl6KmOEIoIp0QdpQMmyAmSIbNbvRbZIqYEdc5lTH9YPqgo8FL-e_no9fmCAR	0%	Avira URL Cloud	safe
https://id.google.com/verify/AH5-l66RjxRYlZia8kx-lhkL99gG67KcI0KlMQF1gPq9Tud4QjnMLas_PW5IUMerg7nd4jcpp5zFVHoMMaUppyaCNRdWcsnab4BspagQpG1YYyWDkw	0%	Avira URL Cloud	safe
https://dsp-cookie.adfarm1.adition.com/?ssp=2&google_gid=CAESEJp76hMseJULimF0zYC7F1I&google_cver=1&google_push=AXcoOmSJHfYBYeX9q-pMRuHNOTC9sWsfU_yHLDvz-sl0pztZZyTzT-K5qpJbJILvfdpxUQINg-FWpWj7O6o9QXzHftpLR88FYYC5yTQT	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy6vd,sy4hn,sy1b3,sG005c,aZ61od,sy4ve,sy2dy,hspDDf,sy8hq,sy8n2,sy8n1,sy4ii,sy1n3,syug,sy1nh,sy8mr,sy8n0,sy8mw,sy8mq,sy4b5,sy8mp,sy8ms,sy6vu,sy4in,sy2dd,sy2df,sy2dc,sy2dv,fREC7d,sy1kr,sy12o,syz4,sy8mv,sy8mu,sy843,sy6vg,syyu,ZYZddd,sy6vf,etGP4c,sy844,sy6ve,peG5,sy6vh,syvu,syvz,SrMpob,sy5te,sy12u,sy12p,sy12q,sy12t,m1Ro8b,sy4ay,msmzHf,sy7dz,sy3s4,SC7lYd,oUlnpc,sy8g9,sy8ga,sy6ok,sy4mt,sy2tg,sy1tj,sy1od,sy1pr,Da4hkd,sy49o,fVaWL,sy1tk,sy1th,sy1tg,sy1tf,sywx,syx0,syww,aD8OEe,sy6oi,sy1w6,xfmZMb,sy3q0,Elkdbc?xjs=s3	0%	Avira URL Cloud	safe
https://www.google.com/client_204?atyp=i&biw=1280&bih=897&ei=yGvZZ_-xK_idi-gPtKK5iQc&opi=89978449	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/index-53f673b4.js	0%	Avira URL Cloud	safe
https://www.google.com/ads/measurement/l?ebcid=ALh7CaR7WuDneXX8-f5FCKNNn9vmqRtkjh31gzEgHC3vefIfRic2XDpRsewirG_sVopyxFPY3Sx30Rgrs2KY6at1ALpJ4uHp9Q	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy1rf,gSZvdb,sy5r2,cSX9Xe,sy6v4,nPaQu,sy49l,syx4,GCSbhd,sy4aj,syx6,syx7,QhoyLd,sy7kd,pHXghd?xjs=s3	0%	Avira URL Cloud	safe
https://files1.majorgeeks.com/9020c93f3d90d02ea7634cd5a4b16e525485a415/input/gs-auto-clicker.exe	0%	Avira URL Cloud	safe
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRDv9UXn3V8cC5tR4Wo2P_pABCxGnJwTxZHjEj3bIFI8CAw7ocGCK2m2BKbTqHZSZeng-5Jyt6wf-BgvWW1Z8zCqjK-SA	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/adview?ai=CSKwMwmvZZ6qbN5iPjuwP6pv7mAu9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTY5NjA4MjU1NjI3NTc4NTLIAQmoAwHIAwKqBOkBT9Cenyn45_MlqHbMrxQ7JrlLF2qovhmZCCLFNftkmxJ1FAMvMx9qRI1d7NucyuCtfN-PrtaHv5zp1_c8MRtkK_kETkdCgU1ol6Z2PMEc8KQ8djhct-Ck8QsqrcpzzIxUgLYVmFXgiw0PORTlC0-TYsBT_il3GjALNSJhwuw6Zg7c4p55hmSKpQndwX29kVXzTAQoAuUSHhKnMwyhpXCssNhNuwK3alApZ1E57wyWp7LDX28FkL42kSXMp6BhxXc1ZBu8FnyAV6S4xhZ9kHvvFLhecum7CGWe_AdxEfPk1kjO9fFcg6ckJxGABtWArMWQkI7-owGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WK_luqTVk4wDgAoB-gsCCAGADAHqDRMI3Pv8pNWTjAMVmIeDBx3qzR6z0BUBgBcBshccChgSFHB1Yi02OTYwODI1NTYyNzU3ODUyGAAYDA&sigh=-qONP5ktA48&uach_m=%5BUACH%5D&cid=CAQSPACjtLzMgkqqmaQDV7UFxtZ9Fl3Imx8mmzBZeAkoi1RR2XQRArxuw9G2ON0Q_0uie3vJ4zAv5ay9W6I1-hgB	0%	Avira URL Cloud	safe
https://pr-bh.ybp.yahoo.com/sync/adx?google_gid=CAESEGDRnuq9VMkvu_PfQu70Onw&google_cver=1&google_push=AXcoOmSbtTEKtOyaTwcsbG7QzuFNVCiTJTfbsE6hdLTxQnB0MgrTOdES4W-7RGKM8f85SWdOvJyg-SIgHlJ5QxIG3tc6BGWoU-Ow9wo	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEC_SsiKGsDy_LWAa_INoNnc&google_cver=1&google_push=AXcoOmTPdt7YB564eOhdO9sebmPAyDLNvpgs8Blp6y9bfLZb7plt90gz5mv-5yVUoNbJuYN2o9jnFkgiS82MVD5972_uKmYaE2c_lUQ	0%	Avira URL Cloud	safe
https://api.majorgeeks.com/api.php	0%	Avira URL Cloud	safe
https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house&google_gid=CAESEJTRQrI647_u5KtoBEe9QNw&google_cver=1&google_push=AXcoOmTOGBEX3m8xUGKWwSGUT6KCSgpj0_xihTnq6F2-jlVMxkdTRSbeBequ52239b7tPl8AzKuredGbcBPs8vx1GB48eHod3isa2iKi&tc=1	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmRxer951VS2yYI9e8kTizhIr3UHkiXbjvAbAB5_BfqR6a-qU-pLPQYbi6i50PvpOP2b4eIHJNAPjAK6tQlxBBwX4Cg7x_5TFPu1FQ&google_hm=3fa31b52134e37b7257c1k00m8ehprmn	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=4&gs_rn=42&psi=RiE6LnTRE6htll8-&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13JSgRhWKJuiYnroq9EpCZ1UJl4ao7eq82DeDo6Ip7U76H29VLP4U3EhafUKf_MDqACUgz5nIw	0%	Avira URL Cloud	safe
https://ib.adnxs.com/setuid?entity=101&code=CAESEH8R7osegs46rDbly8p3D1U&google_cver=1	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm	0%	Avira URL Cloud	safe
https://dclk-match.dotomi.com/match/bounce/current?DotomiTest=369da45bdcf5162c&is_secure=true&networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=280&slotname=9293800031&adk=2344477007&adf=1796376380&pi=t.ma~as.9293800031&w=952&abgtt=6&fwrn=4&fwrnh=100&lmt=1742302145&rafmt=1&format=952x280&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144002&bpp=9&bdt=3680&idt=1625&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=156&ady=414&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=d%7C%7CoeE%7Cp&abl=XS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=3&uci=a!3&fsb=1&dtd=1629	0%	Avira URL Cloud	safe
https://tr-us.adsmoloco.com/pm?google_gid=CAESEP8WIY6gcbDYCokDKSIkhcQ&google_cver=1&google_push=AXcoOmSpwtwrJkiJTF1S-XU2S0LyQltnRzYCZnhnwkiok9VJ_5rkgwdl4vT22BOWrfrzGSVlFR_uh8ybLiwdjleO9EWUsA5YS4PveZ3d	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=GLSw24z_oq3oVRim-pvSoNSruqgBGMDc3afXo-zS6QEYu_LIu9ygv6x1GL7huuvElLfoLQ&nolsbt=1	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?q=virustotal&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=EAEYtLDbjP-irehVGKb6m9Kg1Ku6qAEYwNzdp9ej7NLpARi78si73KC_rHUYvuG668SUt-gtMq4BChEKD3ZpcnVzdG90YWwgc2NhbgoVChN2aXJ1c3RvdGFsIGRvd25sb2FkChgKFnZpcnVzdG90YWwgYWx0ZXJuYXRpdmUKFQoTaXMgdmlydXN0b3RhbCBsZWdpdAoTChF2aXJ1c3RvdGFsIHJlZGRpdAoQCg52aXJ1c3RvdGFsIGFwaQoQCg52aXJ1c3RvdGFsIGFwcAoWChR2aXJ1cyBzY2FubmVyIG9ubGluZRBH	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirus%26oq%3Dvirus%26gs_lcrp%3DEgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB%26sourceid%3Dchrome%26ie%3DUTF-8%26sei%3DyGvZZ6XxA9fzi-gP7NXC0QQ&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z9lrxdHM6S8ALV6kAHuYuwAA	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/x0v5TSWbgkg/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lV1zr3tGQQWYPvIl26GaywFEberw	0%	Avira URL Cloud	safe
https://www.google.com/client_204?atyp=i&biw=1280&bih=897&ei=zmvZZ-j8Gpygi-gP1JuUyAU&opi=89978449	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEL3k9Mnyp61qL16FEes2VLk&google_cver=1&google_push=AXcoOmQnDfz9ywAbJucVOGYSDF65zrz4bgt3YsUzAhb77XJY5XlL4_4qdRLxuycT1AJQ-D1Tu4ocH_y--UCnZ5hj3l66XFB9Tr5ONM8	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=90&slotname=9020540477&adk=3662550234&adf=1705154534&pi=t.ma~as.9020540477&w=728&abgtt=6&lmt=1742302145&format=728x90&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144000&bpp=2&bdt=3678&idt=1611&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=308&ady=64&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=%7C%7CaeE%7C&abl=CA&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=2&uci=a!2&fsb=1&dtd=1617	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=COeXgarVk4wDFQmSgwcdYqMRug	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/1700.09426cce096447a02e29.js	0%	Avira URL Cloud	safe
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.virustotal.com/&ved=2ahUKEwjom_up1ZOMAxUc0AIHHdQNBVkQFnoECAkQAQ	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/63143.bf735ffdec3952120f9f.js	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=zmvZZ-j8Gpygi-gP1JuUyAU&ct=slh&v=t1&im=M&m=HV&aqid=zmvZZ-f4IImkjuwP4sbG0As&pv=0.8991376672096629&me=1:1742302158509,V,0,0,1280,897:0,B,2938:0,N,1,zmvZZ-j8Gpygi-gP1JuUyAU:0,R,1,8,90,36,92,34:0,R,1,CB0QAA,90,88,960,57:0,R,1,CB0QAQ,90,88,841,45:0,R,1,CCAQAA,80,88,36,45:0,R,1,CCAQAQ,80,102,36,31:0,R,1,CB8QAA,117,90,66,42:0,R,1,CB8QAQ,117,90,66,42:0,R,1,CBwQAA,185,90,55,42:0,R,1,CBwQAQ,185,90,55,42:0,R,1,CBsQAA,242,90,63,42:0,R,1,CBsQAQ,242,90,63,42:0,R,1,CB4QAA,306,90,81,42:0,R,1,CB4QAQ,306,90,81,42:0,R,1,CBoQAA,389,90,100,42:0,R,1,CBoQAQ,389,90,100,42:0,R,1,CBkQAA,491,90,67,42:0,R,1,CBkQAQ,491,90,67,42:0,R,1,CAgQBw,90,163,652,2202:0,R,1,CAoQAA,90,163,652,531:0,R,1,CAsQAA,90,163,652,117:0,R,1,CCYQAA,90,724,652,117:0,R,1,CCQQAA,90,870,652,505:520,x:48,h,1,CAsQAA,i:575,G,1,CAsQAA,80,54,1:0,c,169,217:0,G,1,CAsQAA,80,54:0,G,1,CAoQAA,80,54:0,G,1,CAgQBw,80,54:2,e,C&zx=1742302159655&opi=89978449	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/21696.ac72ae4c42f0709d8314.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_parents?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/33589.0bdf980bd22407ac2cdb.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/33274.0b7f0961cbbe09ee97b9.js	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=yGvZZ_-xK_idi-gPtKK5iQc&ved=0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ39UDCAw&bl=zrSh&s=web&zx=1742302157118&opi=89978449	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/58686.b9101021c1a7ed4869ca.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/51452.fa648ae8305fd7561efb.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?relationships=item%2Cvoter	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/75927.c0cde54382ee19d6541c.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/86662.4a563b2d7d2bb4ab0751.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/gui/64630.fc3b5fa709ff1a97d690.js	0%	Avira URL Cloud	safe
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3f1y6rso5ozvw.cloudfront.net	18.66.147.9	true	false	unknown
beacons3.gvt2.com	216.58.206.35	true	false	high
tr.blismedia.com	34.96.105.8	true	false	high
ra.majorgeeks.com	51.81.2.248	true	false	unknown
global.px.quantserve.com	91.228.74.244	true	false	high
i.ytimg.com	142.250.185.150	true	false	high
sync.gonet-ads.com	23.109.14.96	true	false	unknown
recaptcha.net	142.250.186.131	true	false	high
stats.g.doubleclick.net	74.125.206.156	true	false	high
beacons6.gvt2.com	142.250.185.227	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
platform-api.sharethis.com	3.160.150.14	true	false	high
cdn.bidbrain.app	172.67.176.164	true	false	high
cm.g.doubleclick.net	142.250.186.66	true	false	high
www.majorgeeks.com	104.26.11.141	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	54.76.236.164	true	false	high
www.google.com	142.250.185.196	true	false	high
files1.majorgeeks.com	51.81.2.249	true	false	unknown
dsp-cookie.adfarm1.adition.com	80.82.210.217	true	false	high
e9957.e4.akamaiedge.net	23.218.209.56	true	false	high
match.prod.bidr.io	52.31.85.52	true	false	high
creativecdn.com	185.184.8.90	true	false	high
google.com	142.250.185.142	true	false	high
beacons2.gvt2.com	216.239.32.3	true	false	high
ep2.adtrafficquality.google	142.250.185.97	true	false	high
pki-goog.l.google.com	142.250.185.163	true	false	high
gtrace.mediago.io	35.214.168.80	true	false	high
www.virustotal.com	34.54.88.138	true	false	high
analytics-alv.google.com	216.239.38.181	true	false	high
api.majorgeeks.com	51.81.2.252	true	false	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	high
www3.l.google.com	172.217.18.14	true	false	high
ads.travelaudience.com	35.190.0.66	true	false	high
a.tribalfusion.com	104.18.37.193	true	false	high
td.doubleclick.net	142.250.186.66	true	false	high
g.bidbrain.app	104.21.80.92	true	false	high
s.tribalfusion.com	172.64.150.63	true	false	high
cdnjs.buymeacoffee.com	104.26.2.199	true	false	unknown
beacons-handoff.gcp.gvt2.com	142.250.185.163	true	false	high
e4751.b.akamaiedge.net	184.30.20.187	true	false	high
www.recaptcha.net	142.250.185.99	true	false	high
img.buymeacoffee.com	172.67.75.15	true	false	high
gcm.ctnsnet.com	35.186.193.173	true	false	high
tunnel.googlezip.net	216.239.34.157	true	false	high
id.google.com	142.250.184.227	true	false	high
sync.srv.stackadapt.com	54.209.174.12	true	false	high
ep1.adtrafficquality.google	142.250.185.162	true	false	high
gocm-jp.c.appier.net.akadns.net	139.162.84.221	true	false	high
ad.doubleclick.net	142.250.186.70	true	false	high
beacons.gvt2.com	142.250.180.99	true	false	high
dsum-sec.casalemedia.com	104.18.27.193	true	false	high
play.google.com	142.250.185.206	true	false	high
bfp.global.dual.dotomi.weighted.com.akadns.net	89.207.16.201	true	false	high
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
onetag-sys.com	51.89.9.254	true	false	high
dns-tunnel-check.googlezip.net	216.239.34.159	true	false	high
dbhkt46el5ri0.cloudfront.net	18.172.112.27	true	false	unknown
tr-us.adsmoloco.com	107.178.251.134	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	high
beacons4.gvt2.com	216.239.32.116	true	false	high
serve.bidbrain.app	172.67.176.164	true	false	high
px.ads.linkedin.com	unknown	unknown	false	high
dclk-match.dotomi.com	unknown	unknown	false	unknown
sync.teads.tv	unknown	unknown	false	high
t.adx.opera.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
ogs.google.com	unknown	unknown	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high
a.c.appier.net	unknown	unknown	false	high
ajs-assets.ftstatic.com	unknown	unknown	false	unknown
c.pki.goog	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
pr-bh.ybp.yahoo.com	unknown	unknown	false	high
cdn-images.mailchimp.com	unknown	unknown	false	unknown
cms.quantserve.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20250305&st=env	false		high
https://www.virustotal.com/gui/63143.bf735ffdec3952120f9f.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.virustotal.com/&ved=2ahUKEwjom_up1ZOMAxUc0AIHHdQNBVkQFnoECAkQAQ	false	Avira URL Cloud: safe	unknown
https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm	false	Avira URL Cloud: safe	unknown
https://api.majorgeeks.com/api.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/search?q=virus&oq=virus&gs_lcrp=EgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB&sourceid=chrome&ie=UTF-8	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/	false		high
https://www.majorgeeks.com/index.php?ct=core&action=css&id=2	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-a3f452c3.js	false		high
https://www.virustotal.com/gui/1700.09426cce096447a02e29.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/1402accbefdec6a25762.woff2	false		high
https://www.google.com/gen_204?atyp=i&ei=zmvZZ-j8Gpygi-gP1JuUyAU&ct=slh&v=t1&im=M&m=HV&aqid=zmvZZ-f4IImkjuwP4sbG0As&pv=0.8991376672096629&me=1:1742302158509,V,0,0,1280,897:0,B,2938:0,N,1,zmvZZ-j8Gpygi-gP1JuUyAU:0,R,1,8,90,36,92,34:0,R,1,CB0QAA,90,88,960,57:0,R,1,CB0QAQ,90,88,841,45:0,R,1,CCAQAA,80,88,36,45:0,R,1,CCAQAQ,80,102,36,31:0,R,1,CB8QAA,117,90,66,42:0,R,1,CB8QAQ,117,90,66,42:0,R,1,CBwQAA,185,90,55,42:0,R,1,CBwQAQ,185,90,55,42:0,R,1,CBsQAA,242,90,63,42:0,R,1,CBsQAQ,242,90,63,42:0,R,1,CB4QAA,306,90,81,42:0,R,1,CB4QAQ,306,90,81,42:0,R,1,CBoQAA,389,90,100,42:0,R,1,CBoQAQ,389,90,100,42:0,R,1,CBkQAA,491,90,67,42:0,R,1,CBkQAQ,491,90,67,42:0,R,1,CAgQBw,90,163,652,2202:0,R,1,CAoQAA,90,163,652,531:0,R,1,CAsQAA,90,163,652,117:0,R,1,CCYQAA,90,724,652,117:0,R,1,CCQQAA,90,870,652,505:520,x:48,h,1,CAsQAA,i:575,G,1,CAsQAA,80,54,1:0,c,169,217:0,G,1,CAsQAA,80,54:0,G,1,CAoQAA,80,54:0,G,1,CAgQBw,80,54:2,e,C&zx=1742302159655&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/33274.0b7f0961cbbe09ee97b9.js	false	Avira URL Cloud: safe	unknown
https://sync.gonet-ads.com/match/google?google_gid=CAESEFMKTKf4kh-UWb-owGvJjg0&google_cver=1&google_push=AXcoOmRiDTfiVpvnJzBbTB13pleWxWC6lOO-IXOL0Psp2Lq8TRbprzdb0qPF6Pg9ua6hzHYSk_ufY9EpDgTPomsAhi7fQSIskEUiWAF6Aw	false	Avira URL Cloud: safe	unknown
https://sync.teads.tv/um?ssb_provider_id=3&uid=&google_nid=teadstv_ab&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_ab%26google_hm%3D%5BVID_B64%5D&google_gid=CAESEJU7RBGoOYIGXWf5BRbHmVk&google_cver=1&google_push=AXcoOmSROXRGRlUtsbfh6XtARZDgbJFmPZbnfbE3byWtY8t0r-htkn9jXsytp0zHOHQQjU8cfmTJabb4VsZzM4zaYL9JslG6O4wmE8hD	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?s=web&t=aft&atyp=csi&ei=zmvZZ-j8Gpygi-gP1JuUyAU&rt=wsrt.1068,hst.75,sct.222,frts.259,frvt.259,uddfrt.355,prt.357,afts.300,aft.300&imn=14&dtc=691&stc=174&ima=0&imad=0&imac=2&wh=897&opi=89978449&nt=navigate&dt=&ts=300&ant=push	false	Avira URL Cloud: safe	unknown
https://ads.travelaudience.com/google_pixel?google_gid=CAESEKJXM0Z9gKDy7XrzMooDiKw&google_cver=1&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=yGvZZ_-xK_idi-gPtKK5iQc&ved=0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ39UDCAw&bl=zrSh&s=web&zx=1742302157118&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/58686.b9101021c1a7ed4869ca.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/33589.0bdf980bd22407ac2cdb.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/home/upload	false		high
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CIXToqfVk4wDFXqlgwcdeRgz-Q	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/21696.ac72ae4c42f0709d8314.js	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/ca-pub-6960825562757852?href=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&ers=2	false	Avira URL Cloud: safe	unknown
https://a.c.appier.net/gcm?google_gid=CAESEGp5OZ8dSgl_Koq5kz46krM&google_cver=1&google_push=AXcoOmQBgtzBYOeJ8tXT1yWAWFN5AaDMuVM8azBy2ufuzS3iBEbSsFh5Zj0gwUHa7qkaM1Al27cHMPVIgvrsPM55PfF5WtsxNn8DSYg	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/pe_resource_parents?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/setuid?partner=googleadxdb&google_gid=CAESEEleFwSYldNTQLt9TZ9Wy6E&google_cver=1&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=linkedin&google_push=AXcoOmQRXYluR53l0T0zEhVH-TJkbBETvgapqqfLWxY_fJVAFIdcaojTMSjHRldJpMhPftUJw4oCkrI2HAP3Ikyn-IQrpqIk9cCBKVg8	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/user_notifications	false		high
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/votes?relationships=item%2Cvoter	false	Avira URL Cloud: safe	unknown
https://dclk-match.dotomi.com/match/bounce/current?networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/	false		high
https://ep2.adtrafficquality.google/generate_204?pKqyCw	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=yGvZZ_-xK_idi-gPtKK5iQc&s=web&nt=navigate&t=fi&st=3039&fid=1&zx=1742302156956&opi=89978449	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ext/download-icon_1697445891.svg+xml	false		high
https://www.virustotal.com/gui/86662.4a563b2d7d2bb4ab0751.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/51452.fa648ae8305fd7561efb.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_ips?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/click_1734018555_64x64.png	false		high
https://www.virustotal.com/ui/cookie_disclaimer	false		high
https://google.com/domainreliability/upload	false		high
https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/75927.c0cde54382ee19d6541c.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/64630.fc3b5fa709ff1a97d690.js	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=1QaVEwp7Qq8bM4bejR7CQw&google_push=AXcoOmSkxTs3602GDaZldqkrTHbQCZCrWeN6c3NNP2QTuYQEyBiFT0wEQPAOjwkYTBxYr86cSKVEh5qZbrT95F-UxjgY7qd5TOqdvBM	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/index-35ea2358.css	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/88116.55042d85007929debb5d.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/html/r20250305/r20190131/zrt_lookup_fy2021.html	false		high
https://www.virustotal.com/gui/45934.9540fa6fd161f61e2993.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dvirus%26oq%3Dvirus%26gs_lcrp%3DEgZjaHJvbWUyDAgAEEUYORixAxiABDINCAEQABiDARixAxiABDINCAIQABiDARixAxiABDIKCAMQABixAxiABDIKCAQQABixAxiABDIKCAUQABixAxiABDIKCAYQABixAxiABDIKCAcQABixAxiABDIKCAgQABixAxiABDIKCAkQABixAxiABNIBCDI0MjdqMGo0qAIAsAIB%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=22&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/_log-error	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/icon.types-peexe.d2868179402000c6d4c8.js	false	Avira URL Cloud: safe	unknown
https://dsp-cookie.adfarm1.adition.com/?ssp=2&google_gid=CAESEJp76hMseJULimF0zYC7F1I&google_cver=1&google_push=AXcoOmSJHfYBYeX9q-pMRuHNOTC9sWsfU_yHLDvz-sl0pztZZyTzT-K5qpJbJILvfdpxUQINg-FWpWj7O6o9QXzHftpLR88FYYC5yTQT	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13Jl2_Hcs5HTnj4cEl6KmOEIoIp0QdpQMmyAmSIbNbvRbZIqYEdc5lTH9YPqgo8FL-e_no9fmCAR	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mitre_trees	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/dropped_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy6vd,sy4hn,sy1b3,sG005c,aZ61od,sy4ve,sy2dy,hspDDf,sy8hq,sy8n2,sy8n1,sy4ii,sy1n3,syug,sy1nh,sy8mr,sy8n0,sy8mw,sy8mq,sy4b5,sy8mp,sy8ms,sy6vu,sy4in,sy2dd,sy2df,sy2dc,sy2dv,fREC7d,sy1kr,sy12o,syz4,sy8mv,sy8mu,sy843,sy6vg,syyu,ZYZddd,sy6vf,etGP4c,sy844,sy6ve,peG5,sy6vh,syvu,syvz,SrMpob,sy5te,sy12u,sy12p,sy12q,sy12t,m1Ro8b,sy4ay,msmzHf,sy7dz,sy3s4,SC7lYd,oUlnpc,sy8g9,sy8ga,sy6ok,sy4mt,sy2tg,sy1tj,sy1od,sy1pr,Da4hkd,sy49o,fVaWL,sy1tk,sy1th,sy1tg,sy1tf,sywx,syx0,syww,aD8OEe,sy6oi,sy1w6,xfmZMb,sy3q0,Elkdbc?xjs=s3	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CSKwMwmvZZ6qbN5iPjuwP6pv7mAu9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTY5NjA4MjU1NjI3NTc4NTLIAQmoAwHIAwKqBOkBT9Cenyn45_MlqHbMrxQ7JrlLF2qovhmZCCLFNftkmxJ1FAMvMx9qRI1d7NucyuCtfN-PrtaHv5zp1_c8MRtkK_kETkdCgU1ol6Z2PMEc8KQ8djhct-Ck8QsqrcpzzIxUgLYVmFXgiw0PORTlC0-TYsBT_il3GjALNSJhwuw6Zg7c4p55hmSKpQndwX29kVXzTAQoAuUSHhKnMwyhpXCssNhNuwK3alApZ1E57wyWp7LDX28FkL42kSXMp6BhxXc1ZBu8FnyAV6S4xhZ9kHvvFLhecum7CGWe_AdxEfPk1kjO9fFcg6ckJxGABtWArMWQkI7-owGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WK_luqTVk4wDgAoB-gsCCAGADAHqDRMI3Pv8pNWTjAMVmIeDBx3qzR6z0BUBgBcBshccChgSFHB1Yi02OTYwODI1NTYyNzU3ODUyGAAYDA&sigh=-qONP5ktA48&uach_m=%5BUACH%5D&cid=CAQSPACjtLzMgkqqmaQDV7UFxtZ9Fl3Imx8mmzBZeAkoi1RR2XQRArxuw9G2ON0Q_0uie3vJ4zAv5ay9W6I1-hgB	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/index-53f673b4.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRDv9UXn3V8cC5tR4Wo2P_pABCxGnJwTxZHjEj3bIFI8CAw7ocGCK2m2BKbTqHZSZeng-5Jyt6wf-BgvWW1Z8zCqjK-SA	false	Avira URL Cloud: safe	unknown
https://beacons.gcp.gvt2.com/domainreliability/upload	false		high
https://ep2.adtrafficquality.google/sodar/sodar2.js	false		high
https://www.majorgeeks.com/images/click_here.gif	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/5796.c746c3b6bc746c9c5e64.js	false	Avira URL Cloud: safe	unknown
https://files1.majorgeeks.com/9020c93f3d90d02ea7634cd5a4b16e525485a415/input/gs-auto-clicker.exe	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.s.en.fukt8OIT_bI.2018.O/ck=xjs.s.VN3EtFKhSx4.L.B1.O/am=AOEQIAQAAAACAABACAAVgAAAAAAAAAAAAAAAAAAAAAAAAAAgAQAAAAEAAAACAAAAAgAAIIgCEEApkwAAAAAITgoA2QEAAACADyARpwqgAADAgAAgIEgAAAAgACAAQAAAJoQABEIWgIACAAIQQgAAEABgAgAARICACAT7_Y-BAQCgAQAAEIAAQC0FEIcEIAAAAwCAAy4ASAjAAITsAhIAAEAJAQABIAAAKAAAACAAAIAIwEMwDICgAsAAjgAAAACADAAIBAAAEAgQAgAwAKAQABAgAAB6AEAAPgAAIAEiAEAoAAMYAKAQABL4YQMAAgAAOAkEAIAAIAsEOIwYAAEAAAAAAADIA8DjATikoAAAAAAAAAAAAAAAAAABSBDMgfQLAggAAAAAAAAAAAAAAAAAAIAUQRPXGgAQ/d=0/dg=0/br=1/ujg=1/rs=ACT90oFfcCO_dVPBto2U2n5XCyIew6DfoA/m=sy1rf,gSZvdb,sy5r2,cSX9Xe,sy6v4,nPaQu,sy49l,syx4,GCSbhd,sy4aj,syx6,syx7,QhoyLd,sy7kd,pHXghd?xjs=s3	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/19831.b7dc4ed50a3bcf2c981c.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/38347.5580e8a2a4c5432ff76c.js	false	Avira URL Cloud: safe	unknown
https://api.majorgeeks.com/api.php	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/behaviour_mbc_trees	false	Avira URL Cloud: safe	unknown
https://www.majorgeeks.com/index.php?ct=core&action=tasks	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2	false		high
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_urls	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/signin?relationships=groups%2Cparent_group	false		high
https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEC_SsiKGsDy_LWAa_INoNnc&google_cver=1&google_push=AXcoOmTPdt7YB564eOhdO9sebmPAyDLNvpgs8Blp6y9bfLZb7plt90gz5mv-5yVUoNbJuYN2o9jnFkgiS82MVD5972_uKmYaE2c_lUQ	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/sha256.worker.5553997fe32b1412e31e.worker.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=yGvZZ_-xK_idi-gPtKK5iQc&ved=0ahUKEwj_tZ2n1ZOMAxX4zgIHHTRRLnEQ39UDCAw&bl=zrSh&s=web&zx=1742302157113&opi=89978449	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEOUAUtRsoR0aXX-y52IEmw4&google_cver=1	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/contacted_domains?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/files/7c90795c9b28fac978386626f5a54033dc9cba46ef6a3f742fc7d52b394590f2/comments?limit=10&relationships=item%2Cauthor&cursor=CtIBChEKBGRhdGUSCQjjiq2A5v2BAxK4AWoRc352aXJ1c3RvdGFsY2xvdWRyogELEgZTYW1wbGUiQDdjOTA3OTVjOWIyOGZhYzk3ODM4NjYyNmY1YTU0MDMzZGM5Y2JhNDZlZjZhM2Y3NDJmYzdkNTJiMzk0NTkwZjIMCxIHQ29tbWVudCJJN2M5MDc5NWM5YjI4ZmFjOTc4Mzg2NjI2ZjVhNTQwMzNkYzljYmE0NmVmNmEzZjc0MmZjN2Q1MmIzOTQ1OTBmMi02ZGM4Yzc4NgwYACAB	false	Avira URL Cloud: safe	unknown
https://ra.majorgeeks.com/www/delivery/spcjs.php?id=1&target=_blank	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/13420.d3d46638faf8c55e02cf.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=4&gs_rn=42&psi=RiE6LnTRE6htll8-&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=yGvZZ_-xK_idi-gPtKK5iQc&s=jsa&jsi=s,st.3087,t.0,at.1863,et.click,n.vZr2rb,cn.1,ie.0,vi.1&zx=1742302157112&opi=89978449	false	Avira URL Cloud: safe	unknown
https://dclk-match.dotomi.com/match/bounce/current?DotomiTest=369da45bdcf5162c&is_secure=true&networkId=14000&version=1&google_gid=CAESEHUNpJtjzSSmXfpZsER18Ok&google_cver=1&google_push=AXcoOmRurkRiNisxv8qQrUC92yUaHS6nwiX7cM886J4c0Ed4k-E5xa7nfHex0ZuTSqfaWWLqVVehR-JNqo2pXR4Y-IUEaDaUPNBjyJIV	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6960825562757852&output=html&h=280&slotname=9293800031&adk=2344477007&adf=1796376380&pi=t.ma~as.9293800031&w=952&abgtt=6&fwrn=4&fwrnh=100&lmt=1742302145&rafmt=1&format=952x280&url=https%3A%2F%2Fwww.majorgeeks.com%2Fmg%2Fgetmirror%2Fgs_auto_clicker%2C1.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTM0LjAuNjk5OC4zNiIsbnVsbCwwLG51bGwsIjY0IixbWyJDaHJvbWl1bSIsIjEzNC4wLjY5OTguMzYiXSxbIk5vdDpBLUJyYW5kIiwiMjQuMC4wLjAiXSxbIkdvb2dsZSBDaHJvbWUiLCIxMzQuMC42OTk4LjM2Il1dLDBd&dt=1742302144002&bpp=9&bdt=3680&idt=1625&shv=r20250305&mjsv=m202503130101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C728x90&nras=1&correlator=6585071279416&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=156&ady=414&biw=1263&bih=897&scr_x=0&scr_y=0&eid=95352052%2C95353420%2C95353450%2C95354598&oid=2&pvsid=47956830714966&tmod=1662682640&uas=1&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C897&vis=1&rsz=d%7C%7CoeE%7Cp&abl=XS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=2&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&pgls=CAA.&ifi=3&uci=a!3&fsb=1&dtd=1629	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/64098.e0e849e8e6828c121862.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/static/qrcode.min.js	false		high
https://www.virustotal.com/gui/47031.2babf16af54b794b0c1c.js	false	Avira URL Cloud: safe	unknown
https://tr-us.adsmoloco.com/pm?google_gid=CAESEP8WIY6gcbDYCokDKSIkhcQ&google_cver=1&google_push=AXcoOmSpwtwrJkiJTF1S-XU2S0LyQltnRzYCZnhnwkiok9VJ_5rkgwdl4vT22BOWrfrzGSVlFR_uh8ybLiwdjleO9EWUsA5YS4PveZ3d	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=virustotal&psi=zmvZZ-j8Gpygi-gP1JuUyAU.1742302159047&dpr=1&ofp=GLSw24z_oq3oVRim-pvSoNSruqgBGMDc3afXo-zS6QEYu_LIu9ygv6x1GL7huuvElLfoLQ&nolsbt=1	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/49272.a1a64aa6f85fd5188f70.js	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Z9lrxdHM6S8ALV6kAHuYuwAA	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/static/opensearch.xml	false		high
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEL3k9Mnyp61qL16FEes2VLk&google_cver=1&google_push=AXcoOmQnDfz9ywAbJucVOGYSDF65zrz4bgt3YsUzAhb77XJY5XlL4_4qdRLxuycT1AJQ-D1Tu4ocH_y--UCnZ5hj3l66XFB9Tr5ONM8	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.218.209.56	e9957.e4.akamaiedge.net	United States	6453	AS6453US	false
142.250.185.99	www.recaptcha.net	United States	15169	GOOGLEUS	false
142.250.74.202	unknown	United States	15169	GOOGLEUS	false
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
51.81.2.249	files1.majorgeeks.com	United States	16276	OVHFR	false
142.250.74.200	unknown	United States	15169	GOOGLEUS	false
18.66.147.9	d3f1y6rso5ozvw.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
91.228.74.200	unknown	United Kingdom	27281	QUANTCASTUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
51.81.2.248	ra.majorgeeks.com	United States	16276	OVHFR	false
142.250.185.227	beacons6.gvt2.com	United States	15169	GOOGLEUS	false
54.195.139.139	unknown	United States	16509	AMAZON-02US	false
142.250.186.70	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.74	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
108.177.15.84	unknown	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
51.81.2.252	api.majorgeeks.com	United States	16276	OVHFR	false
216.58.206.42	unknown	United States	15169	GOOGLEUS	false
172.217.18.2	unknown	United States	15169	GOOGLEUS	false
3.160.150.14	platform-api.sharethis.com	United States	16509	AMAZON-02US	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
23.109.14.96	sync.gonet-ads.com	Netherlands	7979	SERVERS-COMUS	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
142.250.185.195	unknown	United States	15169	GOOGLEUS	false
54.209.174.12	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
142.250.186.86	unknown	United States	15169	GOOGLEUS	false
34.54.88.138	www.virustotal.com	United States	2686	ATGS-MMD-ASUS	false
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.181.234	unknown	United States	15169	GOOGLEUS	false
142.251.116.94	unknown	United States	15169	GOOGLEUS	false
216.58.206.35	beacons3.gvt2.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
142.250.185.162	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
52.31.85.52	match.prod.bidr.io	United States	16509	AMAZON-02US	false
142.250.186.131	recaptcha.net	United States	15169	GOOGLEUS	false
172.217.18.99	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
35.214.168.80	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
107.178.251.134	tr-us.adsmoloco.com	United States	15169	GOOGLEUS	false
104.26.11.141	www.majorgeeks.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.97	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.26.3.199	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.0.66	ads.travelaudience.com	United States	15169	GOOGLEUS	false
104.18.37.193	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.142	google.com	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
142.250.184.227	id.google.com	United States	15169	GOOGLEUS	false
142.250.184.195	unknown	United States	15169	GOOGLEUS	false
142.250.186.35	unknown	United States	15169	GOOGLEUS	false
18.172.112.27	dbhkt46el5ri0.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
142.250.185.67	unknown	United States	15169	GOOGLEUS	false
89.207.16.201	bfp.global.dual.dotomi.weighted.com.akadns.net	Sweden	25751	VALUECLICKUS	false
172.64.150.63	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.106	unknown	United States	15169	GOOGLEUS	false
185.184.8.90	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
142.250.185.150	i.ytimg.com	United States	15169	GOOGLEUS	false
80.82.210.217	dsp-cookie.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
142.250.186.102	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
142.250.184.232	unknown	United States	15169	GOOGLEUS	false
142.250.185.74	unknown	United States	15169	GOOGLEUS	false
172.217.16.195	unknown	United States	15169	GOOGLEUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
142.250.184.234	unknown	United States	15169	GOOGLEUS	false
172.67.176.164	cdn.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
74.125.206.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.26.10.141	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.23.99	unknown	United States	15169	GOOGLEUS	false
139.162.84.221	gocm-jp.c.appier.net.akadns.net	Netherlands	63949	LINODE-APLinodeLLCUS	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
142.250.186.99	unknown	United States	15169	GOOGLEUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
216.58.206.67	unknown	United States	15169	GOOGLEUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
184.30.20.187	e4751.b.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
142.250.185.138	unknown	United States	15169	GOOGLEUS	false
35.186.193.173	gcm.ctnsnet.com	United States	15169	GOOGLEUS	false
51.89.9.254	onetag-sys.com	France	16276	OVHFR	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
172.67.75.15	img.buymeacoffee.com	United States	13335	CLOUDFLARENETUS	false
104.21.80.92	g.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
104.26.2.199	cdnjs.buymeacoffee.com	United States	13335	CLOUDFLARENETUS	false
216.239.34.157	tunnel.googlezip.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641802
Start date and time:	2025-03-18 13:48:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean4.win@32/203@248/741

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.78, 216.58.206.67, 142.250.181.238, 108.177.15.84, 142.250.185.206, 142.250.74.200, 142.250.184.238, 142.250.186.142, 142.250.186.106, 172.217.16.194, 142.250.186.74, 13.85.23.206, 23.199.214.10, 52.149.20.212
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	867241
Entropy (8bit):	7.029197286300568
Encrypted:	false
SSDEEP:
MD5:	6862F65BE14FD3CE88086EC79777DB6E
SHA1:	7F0EB7535B59A926446A400FF93F48165B58AC95
SHA-256:	7C90795C9B28FAC978386626F5A54033DC9CBA46EF6A3F742FC7D52B394590F2
SHA-512:	D04700CA41BD2076ECB7B9028BA16738DE479B3113EFEA0C86613F354E977F9B4DFF6DBD8C06FCC4536BE0585CFF7F0E2636A2A6789373EFAD7788A7559BAB04
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......-...i.i.i..9.k.`.:.w.`.,...`.+.P.N%.c.N%.H.i.d.`. ./.w.:.k.w.;.h.i.8.h.`.>.h.Richi.........................PE..L...\kLW..........#..................c....... ....@..........................P.......r........@.......@.....................<...T.................................................................................... ..@............................text............................... ..`.rdata..\.... ......................@..@.data............h..................@....rsrc................H..............@..@................................................................................................................................................................................................................................................................................................................................

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

C:\Users\user\Downloads\Unconfirmed 963462.crdownload

C:\Users\user\Downloads\abf1af0e-1f3e-45d3-8e6f-fe4dcfcc60b9.tmp

C:\Users\user\Downloads\gs-auto-clicker.exe (copy)

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 220

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 245

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 251

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Windows Analysis Report
https://www.majorgeeks.com/mg/getmirror/gs_auto_clicker,1.html